It’s a shame Apple decided not to implement e2ee like Google did.
This is an older article, but there is still no movement. https://forums.appleinsider.com/discussion/234352/apples-flavor-of-rcs-wont-support-googles-end-to-end-encryption-extension
You just described my playstyle :) The Frostburn gloves help with mana regen, 5+% lucky shot chance to return 20%+ mana, plus a ~20% chance to freeze on any hit. Using Avalanche instead of Shatter can help with free Ice Shard casts and there is an aspect for Avalanche to proc twice. You probably know all this though as its super meta. I’m worried of nerfs :(
Then you should know that attackers don’t take your plain-text or cracked password and the start manually guessing similar codes on your other accounts
Oh they absolutely do.
You keep going back to hashing methodology. I totally agree that if the website hashes your password correctly, its unlikely to be compromised.
That said, you are trusting the website in that regard, when it has been repeatedly proven that there are sites, even large ones, have exposed passwords.
You said at the beginning of this thread that you can’t trust password managers to manage your password correctly. But you trust random websites with that password instead.
So put your hashing discussion to one side, and think of the scenerio where your passwords are not encrypted. Because you can’t guarentee that they are.
What got me into this discussion was your comment
Changing even a single letter will completely scramble your password with hash, so for all intents and purpose it is equivalent to a unique password
It is just such bad advice. Anyone who thinks changing a few letters in their password used accross multiple sites deserves to be hacked.
Edit: I’m going to stop here. I don’t think I’m getting through. Thanks for the chat.
I totally understand. I think you’re missing my point.
I am willing to bet multiple sites we both signed up store their passwords in cleartext (or unsalted hashes, or broken hashing methods).
So the attackers now have one of our passwords. They may even have a number of our passwords. In my case, using a password manager, the attacker has multiple completely random strings that I have used as passwords. In your case, the attacker has 2 passwords that look very much the same, although a little changed. You are now screwed.
Password managers holds the key to all my other accounts, where as a random poorly secured site do not
You admitted your passwords are not unique or random, so they do in fact have a definite insight into your other passwords.
a compromised host means I also lose my banking and work account
All password managers recommended in this thread use the master password to encrypt your data.
a compromised host
As suiggested, there are self-hosted versions of these password managers so you don’t necessarily need to trust a host
but that is just not how hash works
You are holding onto the “hash” premise but you aren’t guarenteed that your passwords are being hashed. As I said before, if a site is compromised and your not-random password is leaked, you are vulnerable to having all of your accounts exposed.
I think you are set in your ways, I have tried to enlighten you. I hope your choices don’t come back to bite you in the future.
I’ve used bitwarden for a number of years for personal use. My job uses 1Password which I’ve used for 7 months.
In features they are very similar.
Bitwarden has more granular URL matching (can use regex to match websites) whilst 1Password is weaker in this area (can do subdomain but no URI matching, no wildcard or regex).
1Password UX is much better, certainly feels like a paid for service.
1Password is much more expensive (monthly subscription)
1Password 2FA can read QR codes from the screen and automatically puts the code into the website. Bitwarden needs the QR text pasting into the password entry and puts the code into clipboard when the password is used.
Bitwarden can be self hosted (Vaultwarden).
Overall I think I prefer 1Password but not enough to pay the subscription. Work do give me a free personal account but I don’t like relying on small possible temporary benefits. So I stick with bitwarden. I pay the $10 a year and I’m happy.
Edit: corrected mistake in bitwarden cost
I expect they tell us it can achieve that because under the hood DLSS4 gives it more performance if enabled.
But is that a fair comparison?