[{"data":1,"prerenderedAt":513},["ShallowReactive",2],{"project-12621655":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":46,"post_text":48,"what":49,"said":84,"maker_in_thread":214,"shape":227,"grid":231,"attempts":475,"same_week":476,"maker_shows":47,"maker_hidden":505,"reader_version":506,"card":507},"12621655","Forgiva","Never saves your passwords but regenerates them","title","Show HN: Forgiva – Never saves your passwords but regenerates them","https:\u002F\u002Fforgiva.com\u002F","forgiva.com","marcusfrex",1475401778,2016,97,96,391,2264,18,"notable","security_privacy","password manager","web_app",[21,24,25,26],"deterministic passwords","password generator","master password","roasted",-0.536,{"positive":30,"neutral":31,"mixed":30,"critical":32},1,23,30,55,{"idea":35,"execution":37,"performance":40,"design":42,"privacy":43,"docs":44},{"positive":30,"critical":36},8,{"positive":38,"critical":39},0,6,{"positive":38,"critical":41},4,{"positive":38,"critical":30},{"positive":38,"critical":39},{"positive":38,"critical":45},3,[30,38,30,30,45,30,30,38,45,30,30,30,38,38,30,30,30,30,30,45,45,45,45,45,47,38,30,30,30,30,30,45,30,45,30,45,45,30,38,45],2,null,{"problem":50,"audience":48,"pricing":48,"motivation":48,"time_to_build":48,"stack":60,"openness":82,"stage":83,"team_size":82},{"value":51,"source":52,"evidence":53},"Lets users get strong site passwords without storing a password database","maker",[54,57],{"id":55,"by":11,"text":56},"12621805",">> How does this compare, for example, to the KeePass family of pw-managers? It is a password manager too but with an alternative approach. >> \"Fixes poor passwords,…",{"id":58,"by":11,"text":59},"12621894","Theoretically stored passwords are not safe at all. Sooner or later they will get stolen if it is the case. Forgiva is actually big brother of kyle…",[61,73,78],{"value":62,"source":63,"evidence":64},"Ruby","commenter",[65,69],{"id":66,"by":67,"text":68},"12622411","SloopJon","As I see it, the main benefit of deterministic password generation is the convenience of not needing a password database. Indeed, if the scheme is simple and\u002For portable enough…",{"id":70,"by":71,"text":72},"12622851","tptacek","I'm reading the open source code and this thing is... odd. For instance: it has a \"simple\", \"intermediate\", and \"advanced\" password complexity, and depending on which you choose,…",{"value":74,"source":63,"evidence":75},"OpenSSL",[76,77],{"id":66,"by":67,"text":68},{"id":70,"by":71,"text":72},{"value":79,"source":63,"evidence":80},"PBKDF2",[81],{"id":70,"by":71,"text":72},"unknown","launched",{"praise":85,"objections":96,"requests":150,"questions":176,"alternatives":190},[86],{"value":87,"source":63,"evidence":88},"Interesting idea of regenerating passwords instead of storing them",[89,93],{"id":90,"by":91,"text":92},"12621817","SNvD7vEJ","Ok, cool that you can access it anywhere.",{"id":94,"by":91,"text":95},"12621862","Seems like a really cool idea, as long as the password generator can be proved to be hard enough to break. How long does the retrieval of a password take? Sub-second? 10 seconds?",[97,109,121,132,143],{"value":98,"source":63,"evidence":99},"Deterministic generation is not safer than an encrypted password database",[100,101,105],{"id":66,"by":67,"text":68},{"id":102,"by":103,"text":104},"12621838","blowski","As an end user, I don't care about how the passwords are stored. I care mostly about two things: 1. How hard it is for someone to steal them 2. How easy they are to retrieve when…",{"id":106,"by":107,"text":108},"12621848","SpendBig","Your password will never be secure when you store it on someone else his disk or let someone else encrypt your password. Its not a matter of how, but when there will be a way to…",{"value":110,"source":63,"evidence":111},"Password generation is too slow for practical use",[112,116,120],{"id":113,"by":114,"text":115},"12621789","Fightback","Cool idea, but the main gripe I have with it is that the passwords it generates are clearly not made for remembering, but regenerating them takes multiple seconds.",{"id":117,"by":118,"text":119},"12621820","Walkman","These security experts forgot one really important thing: usability. I'm not going to wait minutes for one password to generate!",{"id":94,"by":91,"text":95},{"value":122,"source":63,"evidence":123},"Changing passwords and site rules are unclear or unsupported",[124,128],{"id":125,"by":126,"text":127},"12621919","cauterized","What happens then if you want\u002Fneed to rotate your password? How does it deal with stupid password format restrictions?",{"id":129,"by":130,"text":131},"12623188","Canada","How does this handle situations where the generated password isn't accepted by the site? eg. Is too long, absolutely must have at least one symbol and one number, etc. How does…",{"value":133,"source":63,"evidence":134},"Closed-source or non-open licensing with unclear security audit",[135,138,142],{"id":136,"by":91,"text":137},"12621801","How does this compare to the KeePass family of pw-managers? (Besides that Forgiva is closed source and KeePass is open source.) Fixes poor passwords, accessibility and storage…",{"id":139,"by":140,"text":141},"12622048","mynameislegion","NC licenses aren't considered \"Open Source\": http:\u002F\u002Fwww.opensource.org\u002Fdocs\u002Fosd",{"id":102,"by":103,"text":104},{"value":144,"source":63,"evidence":145},"Installer signature fails on Windows due to SHA1",[146],{"id":147,"by":148,"text":149},"12622741","KirinDave","The Windows 64-bit installer is giving a bad signature even though its SHA256 installer hash appears to be correct. It looks like they used SHA1 checks in the installer. I…",[151,155,162,169],{"value":152,"source":63,"evidence":153},"Publish a roadmap and security audit",[154],{"id":102,"by":103,"text":104},{"value":156,"source":63,"evidence":157},"Add mobile apps",[158],{"id":159,"by":160,"text":161},"12621906","huxflux2003","No mobile apps?",{"value":163,"source":63,"evidence":164},"Support shared team folders",[165],{"id":166,"by":167,"text":168},"12622376","Grangar","Does this also support shared folders for teams?",{"value":170,"source":63,"evidence":171},"Use stronger KDFs such as scrypt or argon2",[172,173],{"id":66,"by":67,"text":68},{"id":174,"by":11,"text":175},"12623868",">> What does password complexity have to do with the strength of the algorithm used to generate passwords? It is not the algorithm only but if you can look a little bit more…",[177,182],{"value":178,"source":63,"evidence":179},"How is password rotation handled",[180,181],{"id":125,"by":126,"text":127},{"id":129,"by":130,"text":131},{"value":183,"source":63,"evidence":184},"How does it compare to Master Password and KeePass",[185,186],{"id":136,"by":91,"text":137},{"id":187,"by":188,"text":189},"12622104","nautical","This is similar to masterpassword . They have a mobile app and desktop app . Moreover they are completely free . http:\u002F\u002Fmasterpasswordapp.com\u002F",[191,199,203,207],{"value":192,"source":63,"evidence":193},"Master Password",[194,195],{"id":187,"by":188,"text":189},{"id":196,"by":197,"text":198},"12621992","boot13","This seems similar to Master Password (http:\u002F\u002Fmasterpasswordapp.com\u002F).",{"value":200,"source":63,"evidence":201},"KeePass",[202],{"id":136,"by":91,"text":137},{"value":204,"source":63,"evidence":205},"1Password",[206],{"id":102,"by":103,"text":104},{"value":208,"source":63,"evidence":209},"getvau.lt",[210],{"id":211,"by":212,"text":213},"12621828","dsego","I use getvau.lt, how does this compare?",{"comments":215,"answered":216,"key":217},21,15,[218,221,224],{"id":219,"text":220},"12622657",">> Spamming the input with an array of whatever OpenSSL algorithms Ruby happens to make available, rather than using a memory hard KDF like scrypt, is a bad smell. Sooner or…",{"id":222,"text":223},"12623916","Probably i should explain what i meant with \"got outdated and requires a better version\" sentence. It is a race and as stronger algorithms comes to life -and stronger attack…",{"id":225,"text":226},"12623972","Forgiva is not a key-derivation algorithm itself to compare with Argon2 but a combination way for various hashing and encryption algorithms along PBKDF2 \"depending on…",{"commenters":33,"max_depth":228,"maker_replies":215,"first_comment_mins":229,"lifespan_hours":230},7,61,56,[232,234,236,239,241,243,246,248,251,253,256,260,262,266,269,271,274,277,279,281,283,285,287,289,292,295,298,300,303,305,308,310,313,315,317,320,322,324,326,328,330,334,337,340,345,348,350,351,352,354,357,359,362,364,365,368,371,373,377,378,380,383,386,388,391,394,396,399,404,406,409,413,417,419,420,422,424,426,430,433,435,438,442,445,448,451,453,455,457,458,460,462,464,466,468,471],[66,38,30,233,67,38],"project\u002Fcritical\u002Fidea",[219,38,38,235,11,30],"project\u002Fneutral\u002Fexecution",[237,38,38,238,71,38],"12622839","commenter\u002Fneutral\u002Fnone",[222,38,38,240,11,30],"other\u002Fneutral\u002Fnone",[242,38,38,238,71,38],"12624880",[244,38,30,233,245,38],"12622862","gliptic",[225,38,38,247,11,30],"project\u002Fneutral\u002Fidea",[249,38,30,250,245,38],"12625941","project\u002Fcritical\u002Fexecution",[252,38,38,235,11,30],"12628065",[254,38,38,240,255,38],"12623627","wglb",[257,30,45,258,259,38],"12621984","project\u002Fneutral\u002Fperformance","arthurfm",[261,30,38,258,11,30],"12622626",[263,30,30,264,265,38],"12622653","project\u002Fcritical\u002Fperformance","curun1r",[267,30,30,264,268,38],"12623415","web007",[70,47,30,270,71,38],"project\u002Fcritical\u002Fdesign",[272,47,45,235,273,38],"12623014","Cyph0n",[275,47,38,238,276,38],"12623192","nickpsecurity",[278,47,38,238,71,38],"12623388",[280,47,38,238,276,38],"12623547",[174,47,38,282,11,30],"project\u002Fneutral\u002Fdesign",[284,47,45,282,71,38],"12623958",[286,47,38,282,11,30],"12624017",[288,47,30,250,71,38],"12624873",[290,47,45,235,291,38],"12624999","Scaevolus",[293,47,45,235,294,38],"12626738","aparadja",[296,47,30,250,297,38],"12627201","gakada",[102,45,30,299,103,38],"project\u002Fcritical\u002Fnone",[301,45,38,240,302,38],"12621892","freakz",[58,45,38,304,11,30],"project\u002Fneutral\u002Fprivacy",[306,45,38,238,307,38],"12621928","danieldk",[309,45,38,304,11,30],"12621942",[311,45,38,238,312,38],"12621965","kevhito",[314,45,38,238,11,30],"12622701",[316,45,38,238,312,38],"12623320",[318,45,30,250,319,38],"12622143","minitech",[321,45,38,235,11,30],"12622716",[323,45,30,250,319,38],"12625252",[106,41,30,325,107,38],"project\u002Fcritical\u002Fprivacy",[327,41,38,238,91,38],"12622171",[329,41,30,325,107,38],"12622240",[331,41,45,332,333,38],"12622269","project\u002Fneutral\u002Fdocs","icebraining",[335,41,38,238,336,38],"12622284","Klathmon",[338,41,30,325,339,38],"12622749","BrandoElFollito",[341,342,30,343,344,38],"12623442",5,"project\u002Fcritical\u002Fdocs","zck",[346,39,30,325,347,38],"12622709","AdmiralAsshat",[349,39,38,304,11,30],"12622755",[136,228,45,247,91,38],[55,228,38,247,11,30],[90,228,342,353,91,38],"project\u002Fpositive\u002Fidea",[355,228,30,233,356,38],"12622055","ComodoHacker",[358,228,45,304,91,38],"12622210",[360,228,45,247,361,38],"12621822","buro9",[94,228,45,363,91,38],"project\u002Fmixed\u002Fperformance",[125,228,45,282,126,38],[366,228,45,304,367,38],"12622027","RubyPinch",[369,228,38,238,370,38],"12623180","jjnoakes",[372,228,45,304,126,38],"12625052",[374,228,45,375,376,38],"12621866","project\u002Fneutral\u002Fnone","dom96",[139,228,30,299,140,38],[379,228,45,375,376,38],"12622107",[381,228,38,238,382,38],"12622184","dsr_",[384,228,38,238,385,38],"12623037","cyphar",[387,228,38,238,140,38],"12625154",[389,228,30,343,390,38],"12622385","type0",[392,36,30,233,393,38],"12621872","tf2manu994",[147,395,30,250,148,38],9,[397,395,38,398,11,30],"12624083","maker\u002Fneutral\u002Fexecution",[400,401,38,402,403,38],"12621988",10,"commenter\u002Fneutral\u002Fidea","ninov",[187,405,30,233,188,38],11,[407,405,30,325,408,38],"12622370","zerognowl",[410,411,45,304,412,38],"12629671",12,"ryan-c",[414,415,30,325,416,38],"12623407",13,"mgleason_3",[113,418,30,264,114,38],14,[117,216,30,264,118,38],[129,421,45,247,130,38],16,[423,421,38,398,11,30],"12624058",[425,421,30,233,130,38],"12637854",[427,428,30,233,429,38],"12622495",17,"redpanda_ua",[431,18,38,238,432,38],"12621809","tluyben2",[196,434,45,247,197,38],19,[436,434,45,247,437,38],"12622341","marvel_boy",[439,440,30,343,441,38],"12623343",20,"burgerdev",[443,440,38,444,11,30],"12624023","maker\u002Fneutral\u002Fdocs",[446,215,45,247,447,38],"12621824","max_",[449,215,38,450,11,30],"12621831","maker\u002Fneutral\u002Fidea",[452,215,45,247,447,38],"12621889",[166,454,45,247,167,38],22,[456,454,38,450,11,30],"12624096",[211,31,45,247,212,38],[459,31,38,450,11,30],"12621844",[461,31,30,233,333,38],"12621936",[463,31,38,402,367,38],"12622034",[465,31,38,450,11,30],"12624092",[159,467,45,375,160,38],24,[469,467,38,470,11,30],"12621915","maker\u002Fneutral\u002Fnone",[472,473,38,240,474,38],"12621853",25,"amingilani",[],[477,482,487,492,496,501],{"id":478,"name":479,"points":480,"category":481},"12612246","Wave function collapse",1226,"ai",{"id":483,"name":484,"points":485,"category":486},"12621680","Ascii to SVG",416,"dev_tools",{"id":488,"name":489,"points":490,"category":491},"12646083","Mastodon",364,"infrastructure",{"id":493,"name":494,"points":495,"category":486},"12639612","christophercliff.com",158,{"id":497,"name":498,"points":499,"category":500},"12640851","Cypht",110,"productivity",{"id":502,"name":503,"points":504,"category":481},"12619694","Graph Convolutional Networks",106,false,"v2",{"id":508,"name":5,"line":6,"ai":505,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":509,"top":18,"kw":510,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":511,"url":9,"mix":512,"praise":87,"objection":98,"sub":21},12621655,-0.54,[21,24,25,26],"1011311031110011111333332011111313133103",[30,31,30,32],1794036548238]