Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Copy/paste the needed password from your workstation to a text file on a secure USB key, then use the key to copy/paste it into the login on the other workstation and delete the file.

> * remote-login from their workstation to mine to copy/paste (and hope their workstation's clipboard is secure)?

This option also risks leaving around credentials to remote-login to your workstation.

No sense worrying about the workstation's clipboard-security though- if the workstation itself is pwned or intentionally bugged, the password will be at risk from a keylogger or network-sniffing proxy when it's typed in anyway, so no avoiding that risk.

Option B is to ask yourself whether a 40-character impossible-to-write-down-without-typos password, phones are Not Secure level of security-paranoia is worth the tradeoff of inconvenience (it may be, depending on the nature of your work).



All good points.

FWIW I currently write software which analyzes DNA; privacy and medical issues are real and definite concerns to me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: