Privacy

32051 readers

978 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

How bad is Idea of .Zip as password manager? (programming.dev)

submitted 10 months ago by itsaj26744@programming.dev to c/privacy@lemmy.ml

29 comments fedilink hide all child comments

Any explanation of Why to not store passwords in plaintext and encrypt folder in zip archive (I guess U cant break pass?) Pls don't be agressive!!

you are viewing a single comment's thread
view the rest of the comments

[–] utopiah@lemmy.ml 17 points 10 months ago (1 children)

Depends against whom you are protecting yourself. If it's against

your younger sibling then it's probably sufficient
some script kiddie or scammer running scripts against the most typical setups, might be just obscure enough
a proper targeted attack, then it will depend on which zip software you are using. Most likely the stock one that might (I didn't bother checking) relying on something that is far from the state of the art in terms of encryption. In that case it will most likely not be secure.
a proper attack but you use something like 7z with encryption that is relatively resilient, then most like if you are not facing state actors with huge amount of resources to try to crack it, most likely secure

Note I'm NOT a security expert so... don't believe me.

[–] bhamlin@lemmy.world 4 points 10 months ago* (last edited 10 months ago)

I don't know that I'd really add more. It all depends on who and what you're protecting against. The only thing that's secure is something that doesn't exist.

National level hackers have access to resources you might not be able to think of. And if they really want in, rubber hose cryptography is super effective. But most "hackers" on the Internet? And encrypted zip is often enough to deter them. Not impossible, but you might not be worth the time and effort.

In summary, there is better. Much better than an encrypted zip file. But only you can judge if you're a juicy enough target to pursue more esoteric protection.