> An even more extreme example is this page, which contains over 400 iframes. Without ABP, Firefox uses about 370 MiB. With ABP, that number jumps to 1960 MiB.
ow.
that explains why that page crashed my browser when I stumbled on it a while back :\
hey guys, anybody familiar with lastpass here? im thinking about starting to use it by my concern is that if your host (or one of your devices employing last pass) is compromised, wouldnt that essentially give the attacker full access to all your passwords for all your sites? sure if its compromised they could install a key logger without last pass but then theyd only get credentials for the sites i log in to while as opposed to all of them ive ever used last pass on
Yea, I can see down sides to both sides, I'm just wondering if i am opening myself to bigger risk by consolidating all accounts and passwords in one place to where if im compromised im giving the attacker everything in one bow tie package vs them having to extract it manually from a dump of key logs and waiting for me to login to every site that interests them.
@n00b Out of the probably dozens or hundreds of accounts you have, how many are that important?
You most likely don't care about the vast majority.
For most people, it boils down to email and banking.
Your premise is wrong, because most attackers (a) don't care about most of those accounts either and (b) can retrieve/reset those passwords given your email account anyway.
An attacker getting access to your entire database is more or less the same as an attacker getting access to just your email and banking. The rest of the database is unimportant.
Good point. The accounts I care about I login in to regularly from my host anyways so theyd be compromised if the attacker was looking through all keystrokes/pages browsed. Speaking of email, would you recommend not storing your email creds in the password manager then?
@n00b I use a unique password for my email and banking, not saved. But that's not strictly necessary - I only do so because I actually need to log into those without the password manager, so it also needs to be something I can remember.
IMO, my password is probably (!!) long and complex enough to be unguessable, and an attacker capable of keylogging me can probably perform an active attack anyway.
In the event of an active attack, multi-factor becomes useless.
It does provide security benefits against passive attacks.
If a backup device was possible (and easier), then I might go for it.
@JourneymanGeek A passive keylogging attack is only slightly more likely than an active attack.
An active attack implies the attacker is able to control your web browser.
They can retrieve the login token. They can make requests (with that token).
A one time password doesn't protect against that.
In some high-security situations, where the software is suitably secured against an active attack, the passive attack becomes more likely and more important.
For a typical computer? Not so much.
The physical token still increases security. Still not a panacea.
Though, there is one (partial) exception.
A keylogger can be more easily implemented entirely in userspace on your typical consumer OS.
you just do it so that you can access those off your host? I thought you could get those off the password manager website (at least for last pass)? I havent used it but just what i gather from their marketing material
LastPass is more susceptible to a server compromise. Their database is safe, but if an attacker can get access to their webserver then they can modify the site JS to send your passwords elsewhere.
@MichaelFrank are you still torturing that guy superuser.com/questions/949608/… :-) why you call yourself excel-luver and not know your apples from you oranges.
no you buy refurb (depending on the type of refurb) they never actually fix things, or solve the lemony of them. it is often more like a recycled fail. But discovering WHY a certian model is rejected (general reviews), and seeing if that would effect your specific needs. Regret always comes in the form of reading about the problems of a device , when searching for Why you now have them,
re-box , re-pack get some good ones of those at newegg too, there it might be missing a few screws :-) same thing applies, some of the returns come from post order learning.
I suppose CYA still exists for all situations anyway. 20 great reviews 2 bad ones, get home with the product , and really test and use all aspects of it, you start agreeing with the 2 bad reviews (even though it may not cause a problem for you)
superuser.com/questions/384472/… Cheapskate is one thing :-) but tying to leach a computer expo giveaway that is only 2g :-) One could probably find a place that sells those for 1-2$ each in the thousands.
That is like getting free advertising pens and trying to get the logo off them :-) I think the firmware in those locks a section out, not a partition that a user tossed on?
CDemulation, i have a USb device that uses that method for its certannly locked down data area where the devices programs are strored.
Wiki "Some preloaded drives are read-only, while others are configured with both read-only and user-writable segments. Such dual-partition drives are more expensive"
I figure those locations that have learned how to hack the firmware on usb sticks could probably undo it too. there is at least one place on the web i saw that was trying to fix Fake Usbs . there is usually either a hard device or a mess of software and Bs to have to go through that makes buying a 2gig stick look like childs play
Ahh what some people will go through to save a buck. why just 20 miles from here I can buy gas for 5cents less :-)
still trying to figure out how much the dog can carry :-)
@Psycogeek What I don't like is it's trackball being in the middle. I will sure accidentally roll it with index and finger beside it. I think Logitech M507 Trackball that has it on the left that you control with your thumb is best in this case. I will try it although folks report replacing them once a few years or 1 year and each time quality differs. Too bah I don't have places here that allow test drive it. If you buy and open the package it won't be eligible for returns.
@JourneymanGeek I am in a library connecting through HTTPS to sensitive account. Should I worry about eavesdropping or any hacker activity? I was thinking about using my older laptop at home for VPS purposes to tunnel through. Should I?
@Boris_yo in 'merica you buy , you no like, you return. in most states they must tell you there are no returns, and it has to be on the reciept and all. This new Human Proof packaging , that you have to shred to get into. i really think that stuff tries to keep people from returning, but none of that is my fault, so if it sucks I return, even if it wont fit back in the box ,
public computers are a great place to get accounts , people leaving them logged in, and walk away. at home when have you had any requirement to forcefully log-out of web locations
I think most people are a whole lot better informed, then you still have the last 20% who also use Batman as thier password :-)
@JourneymanGeek if the O_O was for me forgetting my mediawiki password, it's fine... Cause it was a fresh install I stood up today. Just annoying that it instantly told me NY password was wrong lol
Well, that's the thing though, I generated the password with lastpass but for some reason it didn't accept it after I tried to log on once it finished installing.
@Psycogeek :I do want it, but I can't help the nagging feeling that the 850 EVO is better.
The SanDisk is rated for ">80 TBW".
The 850 EVO (500 GB) is rated for 150 TBW.
The 850 PRO (512 GB, more expensive) is rated for 300 TBW.
The low TBW rating is concerning, especially since it's supposedly MLC... relatively shoddy NAND? Artefact of the 19nm process? Conservative measurements? Who knows...
what did they say 300 writes? , that is practically USELESS in terms of thinking about 365 days and all. on the other hand sandisk has always been true to thier word. when checking speed for example they will meet or exceed, and other brands have "said anything"
0.5 T can be written to 80T that is ony 160fills and empties isnt it?
The link you posted yesterday to the analisis of the writes, showed a very small rated life for the cells?
I suppose i would question if it is (as it is all TLC) how sandisk rates the same thing that others rate with beloted specs , or with ignoring minor data error :-) for the general life.
I actually dont know anything about this stuff, because some say millions of writes, and some say 10,000, and some say and abysmal 3,000 in 2 days windows can write some crap 3,000 times for like 10-30 different things depending on what is on
not to mention that every write has all that base file system stuff being both updated and fully re-written evertime anything else happens.
All the actual testing, shows i am alrighty, ready to go, so i got one. But much of the information being brandied blogged or rumored about , means it is either already dead? or it will last 20 years? plus if it is not powered the data will slip away? what kind of way is that to operate a company :-)
TLC or MLC , not the only things is it? While the wiki is like "will you people citation this stuff'" There is clues that some could use different ammounts of levels also? that one could be trying to interpret 4 levels and one uses 4 bit or 16 levels?
"SanDisk X4 flash memory cards are based on four bits per cell technology, which uses 16 states."
@MichaelFrank If I use LastPass extension on my own PC but on public connection that I know is hacked, is there a risk with data travelled being eavesdropped?
"Samsung has pioneered high-performance MLC technology with three bits per cell for eight total states" Ahh see , i know there is always something more to it :-)
Which could also explain some of the other stuff you were saying , cause that is Night and day differences here, when stuff starts collapsing
@Bob I didnt get anything . I took it out of context (sorry)
Samsung has pioneered high-performance MLC technology with three bits per cell for eight total states. This is commonly referred to as Triple Level Cell (TLC)
But but we still have 2 3 and 4 bit making world of difference in levels.
I am not (usually) the one creating odd tech terms :-) or saying "Triple Level" when there is 8 or 16 levels. I am just the stupid consumer who has to spend a freaking year understanding something because they did :-)
In my world (after we get it changed:-) it will be called TBC for 3 bit cells, and TBC for 2 bit. . . ok , ok so i didnt think this through, but FBC i got covered .
@Boris_yo I'm pretty sure the data is hashed or whatever on your PC before it is sent back to the server. But I would suggest looking at their website, I don't know the exact details.
Even at "demystifying ssd endurance" posted years and years ago, they point out that the endurance rating used by different companies are WilD . yet the base nand chips dropped in some are the same ones :-)
