From Newsgroup: alt.privacy

http://www.stack.nl/~galactus/remailers/passphrase-faq.html

The above site is now defunct, but here is another source. https://www.iusmentis.com/security/passphrasefaq/strength/

These are examples of passphrases and the PS numbers
associated with them. If you can work through these and
get the same numbers, then you are well on your way to
understanding how to make passphrases good or bad.

.280 An average phrase
There is a sucker born every minute.

.761 Phrases with some random letters.
Ignorance is bliss.
spgemxk Education cures ignorance.

.855 Nonsense phrase
betty was smoking tires in her peace of pipe organs and playing tuna
fish.

1.05 A random bunch of characters.
A6:o@6 Ls+\` uGX%3y[k

1.125 Random words
paper factors difference votes behind chain treaties never group
(I misspell some words to protect against a dictionary attack.)

1.34 Odd capitalization/punctuation and nonsense.
Web oF thE Trust is BrokEn cAn You Glue it Back ToGether? and give it
xRays.

--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

carson@percida.net wrote:

http://www.stack.nl/~galactus/remailers/passphrase-faq.html

The above site is now defunct, but here is another source. https://www.iusmentis.com/security/passphrasefaq/strength/

These are examples of passphrases and the PS numbers
associated with them. If you can work through these and
get the same numbers, then you are well on your way to
understanding how to make passphrases good or bad.

[...]

I would recommend to hash your passphrases with Argon2id,
which would then allows people, using foreign languages,
to use their password key for sites which only accepts
ASCII input for passwords/passphrases.

https://en.wikipedia.org/wiki/Argon2
https://github.com/stefanclaas/Argon2id https://github.com/stefanclaas/Argon2id-CLI
--
Regards
Stefan
--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

Found this page.
https://argon2.online/

--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

carson@percida.net wrote:

Found this page.
https://argon2.online/

Nice, but I would not use an online tool
for generating strong password key ... ;-)
--
Regards
Stefan
--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

On Sat, 6 Jul 2024 20:27:00 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

Found this page.
https://argon2.online/

Nice, but I would not use an online tool
for generating strong password key ... ;-)

Yeah, I should have mentioned that.

Anyway - have you any idea how many, many online diary sites exist?

How can anybody of average intelligence not figure out what a problem
that could generate?
--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

carson@percida.net wrote:

On Sat, 6 Jul 2024 20:27:00 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

Found this page.
https://argon2.online/

Nice, but I would not use an online tool
for generating strong password key ... ;-)

Yeah, I should have mentioned that.

Anyway - have you any idea how many, many online diary sites exist?

How can anybody of average intelligence not figure out what a problem
that could generate?

What problem dou you think it is when choosing a strong password/salt
for Argon2id?
--
Regards
Stefan
--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

On Sat, 6 Jul 2024 22:23:36 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

On Sat, 6 Jul 2024 20:27:00 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

Found this page.
https://argon2.online/

Nice, but I would not use an online tool
for generating strong password key ... ;-)

Yeah, I should have mentioned that.

Anyway - have you any idea how many, many online diary sites exist?

How can anybody of average intelligence not figure out what a problem
that could generate?

What problem dou you think it is when choosing a strong password/salt
for Argon2id?

You mean using the online version?

Ha!

You just got to figure that anything you post online is going to be
archived. Another pot of possible ruination are those online password
checking sites. Yes, I believe people do place their real passwords
into those sites. Hackers must love those sites and their archive of operative passwords.

One can't drive themselves into weirdness over worrying about all this Privacy/Security stuff. As Dirty Harry, put it: "A man's got to know
his limitations."

We non tech users have to know certain fundamentals and give up
trying to understand the possible peril in every exe or dll file. That
will drive us dotty. I try just some simple ways to do it.

Don't discuss anything online that's too private or too informative
about your life. Let the hackers and gov't nazis skim through what is
little more than everyday drivel - which is what most of Usenet is -
except for the hate groups like those of politics, religion, race,
etc.

Watch out for the very personal matters you might search for online.
That includes even when using such "safe" sites as DuckDuckGo,
Startpage, etc. A way around that - Tor.

Use Tor.

Yeah, there might be some gov't nodes, but you cannot cover all the
bases. Tor is more likely to protect you than not. There's no reason
your health problems or other such personal searches should be
archived on some search site or other. Such info disclosed to a
prospective employer might get you rejected. That is only one facet of
the many that could happen because of information archived from your
searches. Many hackers have personal information on millions of people
for sale. Employers see nothing wrong in paying for any secret you
might not be revealing to them on your job application.

I'm sure there probably is a better way than Tor, but for the non tech
ignorant ones such as myself, it's there for us without driving us
weird having to learn any tech stuff. Christman did the same for us
with QSL. He *really* did a great job for those of us who weren't
inclined to do all that "wrapping" stuff. Matter of fact, I doubt if
very many of the average users knew of "wrapping" or the fact of anon
posting existing.

QSL, it's simple name, simple download, and simple installation
converted many of the merely curious into users. QSL was a Subject
which certainly filled apa-s for quite a while.

I'm not going to get into all the super cookie stuff or the
truthfulness regarding the claims of Security and Privacy claimed all
the Web browsers of today. All that is beyond my ken. There is
another way I try for online protection. I mention this for the
umptieth time even though I have never had a positive response to it.:
Time Freeze.

What I always get from the mention of ToolWiz's Time Freeze is how it
is not the ultimate solution. (Tell me an "ultimate solution" to
anything.) But it does put my C: drive into a type of virtual restore
mode wherein nothing written to the C: during an online session
sticks to the drive. Reboot, and the C: goes back to what it was
before the last session.

I offer the link only because the Author's site, plus many others, no
longer download the file.

Download from MajorGeeks site. (Author's site is screwed up.) https://www.majorgeeks.com/files/details/toolwiz_time_freeze.html

I've been using it for quite a few years with no other AV or Security
stuff except for blocking phone calls to home with a firewall. I have
screwed up a couple of times with Windows settings only to reboot and
have Windows working again.

Another saving grace which most know about but might not use is
VirusTotal. Too many users are lazy or in denial anything bad can
happen to them.

So, for a non tech ignorant, I think I'm doing well. Ain't nothing
that's 100% fool proof, and I ain't going to go nuts trying to find
it.

Now, you'll have to excuse me for a while. I ran outta breathe. Yeah,
it happens even to the long-winded ones.













--- Synchronet 3.21e-Win32 NewsLink 1.2

From Newsgroup: alt.privacy

On Sat, 06 Jul 2024 21:13:49 -0500,
haley@involuntarily_Invalidated.net wrote:

On Sat, 6 Jul 2024 22:23:36 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

On Sat, 6 Jul 2024 20:27:00 -0000, Stefan Claas <pollux@tilde.club>
wrote:

carson@percida.net wrote:

Found this page.
https://argon2.online/

Nice, but I would not use an online tool
for generating strong password key ... ;-)

Yeah, I should have mentioned that.

Anyway - have you any idea how many, many online diary sites exist?

How can anybody of average intelligence not figure out what a problem
that could generate?

What problem dou you think it is when choosing a strong password/salt
for Argon2id?

You mean using the online version?

Ha!

You just got to figure that anything you post online is going to be
archived. Another pot of possible ruination are those online password >checking sites. Yes, I believe people do place their real passwords
into those sites. Hackers must love those sites and their archive of >operative passwords.

One can't drive themselves into weirdness over worrying about all this >Privacy/Security stuff. As Dirty Harry, put it: "A man's got to know
his limitations."

We non tech users have to know certain fundamentals and give up
trying to understand the possible peril in every exe or dll file. That
will drive us dotty. I try just some simple ways to do it.

Don't discuss anything online that's too private or too informative
about your life. Let the hackers and gov't nazis skim through what is
little more than everyday drivel - which is what most of Usenet is -
except for the hate groups like those of politics, religion, race,
etc.

Watch out for the very personal matters you might search for online.
That includes even when using such "safe" sites as DuckDuckGo,
Startpage, etc. A way around that - Tor.

Use Tor.

Yeah, there might be some gov't nodes, but you cannot cover all the
bases. Tor is more likely to protect you than not. There's no reason
your health problems or other such personal searches should be
archived on some search site or other. Such info disclosed to a
prospective employer might get you rejected. That is only one facet of
the many that could happen because of information archived from your >searches. Many hackers have personal information on millions of people
for sale. Employers see nothing wrong in paying for any secret you
might not be revealing to them on your job application.

I'm sure there probably is a better way than Tor, but for the non tech >ignorant ones such as myself, it's there for us without driving us
weird having to learn any tech stuff. Christman did the same for us
with QSL. He *really* did a great job for those of us who weren't
inclined to do all that "wrapping" stuff. Matter of fact, I doubt if
very many of the average users knew of "wrapping" or the fact of anon
posting existing.

QSL, it's simple name, simple download, and simple installation
converted many of the merely curious into users. QSL was a Subject
which certainly filled apa-s for quite a while.

I'm not going to get into all the super cookie stuff or the
truthfulness regarding the claims of Security and Privacy claimed all
the Web browsers of today. All that is beyond my ken. There is
another way I try for online protection. I mention this for the
umptieth time even though I have never had a positive response to it.:
Time Freeze.

What I always get from the mention of ToolWiz's Time Freeze is how it
is not the ultimate solution. (Tell me an "ultimate solution" to
anything.) But it does put my C: drive into a type of virtual restore
mode wherein nothing written to the C: during an online session
sticks to the drive. Reboot, and the C: goes back to what it was
before the last session.

I offer the link only because the Author's site, plus many others, no
longer download the file.

Download from MajorGeeks site. (Author's site is screwed up.) >https://www.majorgeeks.com/files/details/toolwiz_time_freeze.html

I've been using it for quite a few years with no other AV or Security
stuff except for blocking phone calls to home with a firewall. I have
screwed up a couple of times with Windows settings only to reboot and
have Windows working again.

Another saving grace which most know about but might not use is
VirusTotal. Too many users are lazy or in denial anything bad can
happen to them.

So, for a non tech ignorant, I think I'm doing well. Ain't nothing
that's 100% fool proof, and I ain't going to go nuts trying to find
it.

Now, you'll have to excuse me for a while. I ran outta breathe. Yeah,
it happens even to the long-winded ones.

haley@involuntarily_Invalidated.net has now been truly invalidated.

It was me, Carson, who screwed up and used the wrong nym for the post.

Well, look at it this way. It wasn't a total loss. It had to screw up
the nazis and the hacker bunch for a few seconds at least.

(Old people have to learn to go to bed early instead of posting.)

<sigh>




--- Synchronet 3.21e-Win32 NewsLink 1.2