mburgosh

Spent the night last night dealing with this attack. Here is what you should know to deal with it:

https://www.us-cert.gov/ncas/alerts/TA14-013A

I've always been attracted to use a password archive service, but there is one use case that I encounter very often, maybe you can help me by answering how you deal with this.

What do you do when you need to connect in a PC that is now yours? This happens to be very often in parties when people want me to use my spotify.

Also do you keep your rsa passphrase in the archive?

As for what I do now: I integrate the service name in my password in different ways depending on the name. The combination is long enough and has enough entropy that I feel comfortable against bruteforce attacks, but is quite a mind juggle to find my password sometimes.