[OT] Re: Tango heap is dangerous

[BCS]

Reply to Walter,

> BCS wrote:
> 
>> Reply to Walter,
>> 
>>> There are a lot of sites I would post to, but don't, because I
>>> just tire of the registration process, wait for the email, respond
>>> to
>>> the email, complete the registration, come up with a nick/password I
>>> haven't used elsewhere, try to remember that nick/password, relogin
>>> every time I wipe my cookies, etc. Bah.
>> I use Password Gorilla to keep track of my passwords and use uuidgen
>> to make them. Using GUIDs is a bit hard to remember but I figure they
>> will be even harder to crack!
>> 
>> http://www.fpx.de/fp/Software/Gorilla/
>> 
> I don't use things like that because then all my passwords are
> compromised if I just lose that one password. If I use different
> nicks/passwords for every account, there is no vector from one to the
> next. Each can only be compromised independently.
> 

The only copy of the password archive is on my own system. If they can get 
to that, then they can get to my browsers's password cache so it no worse 
than that. It's better because I can move it easier when I rebuild my system.