Top all-time · #13505
Kaizoku Dev
Personal blog · kaizoku.devsecurityprogramming
Kaizoku Dev is a personal blog at kaizoku.dev about security and programming. Since 2020, 5 different Hacker News readers have linked it 5 times, most often “Double Blind Passwords a.k.a. Horcruxing”. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link this post on double-blind passwords, which they call horcruxing, when discussing password manager security and where secrets are stored. The comments do not judge its quality.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A blog powered by Hashnode
Most-linked posts?
- Double Blind Passwords a.k.a. Horcruxing4 people · 4 mentions · first linked 2020-12-22
What Hacker News says?
Use a horcrux. https://kaizoku.dev/double-blind-passwords-aka-horcruxing
Comment linking /double-blind-passwords-aka-horcruxing
on “Bitwarden raises $100M”Submitted Double Blind Passwords a.k.a. Horcruxing as a story · 336 points
HN discussionPerhaps taking a leaf from Voldemort's book might make you more comfortable with using them. https://kaizoku.dev/double-blind-passwords-aka-horcruxing
Comment linking /double-blind-passwords-aka-horcruxing
on “LastPass Android app has got 7 trackers in it”Submitted A pentester gets root - step by step example as a story · 278 points
HN discussionPBKDF2 iterations is the last in what should be a chain of defence in depth best practices. It gives limited protection against a database breach. Your password service should have as a minimum the following extra defences. - Hardware encryption of the master password hashes. - Breach detection such as poison records. - Database access controls that limit the blast radius of an attack. - All admins should require a…
Comment linking /double-blind-passwords-aka-horcruxing
on “Bitwarden Design Flaw”