This is really cool, and I have a question: Aren't word lists a common resource for brute-force cracking? If you use a known list, does that not then shrink the search space drastically?
Yes, but thankfully, it isn’t a problem… interestingly enough, most crypto wallets are backed up using mnemonics (many of which use the BIP39 wordlist made up of 2048 words). When one uses a good key derivation function, key space is too large to brute force). See sunknudsen.com/stories/exploring-the-password-policy-rabbit-hole.
awesome content, very digestible format and the sequence makes sense, god transition into shoutout, what's not to like here, hmmm, i still don't understand why 5 words are secure compared to a random password generator like avast that uses different input characters
Great video Sun. Off topic: could you share that wallpaper? I really hate the way bigsur and monterey make the top bar blend in based on the wallpaper's colors but this one you're using gives a cool/ dark look without being completely dark and doesn't look like it's part of the bezels
big fan of your works.... is there a way to make diceroll passphases for crypto/btc without installing any softwares to calculate the checksum (last word)?
Hi Sun, great video, I will print your lists and use them :) I have a question as I’m about to downgrade from Monterey to whether Big Sur or Catalina. What are you using or would you recommend?
I would go for Big Sur while considering all versions of macOS a compromise between convenience and privacy. For example, I use Tails for “sensitive” use cases.
Hi sun. I am from India 🇮🇳. I like your videos. The firefox video was the first one I watched. As I have an Android phone and pc which is having windows 10. So can you make any video how to secure Android and window. I tried to disable every setting on my android but the setting app of phone have all the permissions and I can't even disable them. So can you give me any suggestions.
Good question… my gut feeling would be to uninstall app using Homebrew. That said, there are pros and cons to both options. If one uninstalls app using app-clearner, I believe app will still be visible in Homebrew. If one uninstalls app using Homebrew, depending on uninstall script, uninstall might not be “clean”.
I know it's not related to the subject but as a french speaker, using the pronoun "one" as an undefinite pronoun is very painful to process for my brain
This is such a coincidence! I just today implemented an EFF wordlist based passphrase generator for my pet project. Thank you Sun :)
Thanks for creating this printer-friendly version; so much better that way!!!!!!!!!! Very cool UX indeed 👍🏻
This is really cool, and I have a question: Aren't word lists a common resource for brute-force cracking? If you use a known list, does that not then shrink the search space drastically?
Yes, but thankfully, it isn’t a problem… interestingly enough, most crypto wallets are backed up using mnemonics (many of which use the BIP39 wordlist made up of 2048 words). When one uses a good key derivation function, key space is too large to brute force). See sunknudsen.com/stories/exploring-the-password-policy-rabbit-hole.
@@asificam1 thank you for that!
Really enjoyed the podcast episode, good stuff! Happy new year, Sun.
Glad you enjoyed podcast… Happy new year!
Thanks Sun, I always learning something new from your channel.
awesome content, very digestible format and the sequence makes sense, god transition into shoutout, what's not to like here, hmmm, i still don't understand why 5 words are secure compared to a random password generator like avast that uses different input characters
Invaluable guide. Thank you
Pleasure!
Thanks, Sun. Very useful.
You’re amazing sun ! Love this channel
Thanks for the push David 🤓
Awesome! I was just thinking about this today!
Great video Sun. Off topic: could you share that wallpaper? I really hate the way bigsur and monterey make the top bar blend in based on the wallpaper's colors but this one you're using gives a cool/ dark look without being completely dark and doesn't look like it's part of the bezels
Sure, here you go. unsplash.com/photos/pl7wrpPSm2o I agree image looks great on macOS… and I find it calming.
@@sunknudsen Thanks!
big fan of your works.... is there a way to make diceroll passphases for crypto/btc without installing any softwares to calculate the checksum (last word)?
I wish Merry Secure Christmas
Thanks! Same 🤓
Hi Sun, great video, I will print your lists and use them :) I have a question as I’m about to downgrade from Monterey to whether Big Sur or Catalina. What are you using or would you recommend?
I would go for Big Sur while considering all versions of macOS a compromise between convenience and privacy. For example, I use Tails for “sensitive” use cases.
I wonder if it is possible to do the last word sha256 checksum by hand.
please could you reupload macos big sur episode? I really want to set up my mac right
How do you calculate the amount of $$$ it would cost to crack a password/passphrase?
Hi sun. I am from India 🇮🇳. I like your videos. The firefox video was the first one I watched. As I have an Android phone and pc which is having windows 10. So can you make any video how to secure Android and window.
I tried to disable every setting on my android but the setting app of phone have all the permissions and I can't even disable them.
So can you give me any suggestions.
What if a computer take that list and make millions of combinations to guess the password, a Quantum computer or AI ?
If I install an app using homebrew, is it better to uninstall it using homebrew or using the app-cleaner script? Thanks for the great content.
Good question… my gut feeling would be to uninstall app using Homebrew. That said, there are pros and cons to both options. If one uninstalls app using app-clearner, I believe app will still be visible in Homebrew. If one uninstalls app using Homebrew, depending on uninstall script, uninstall might not be “clean”.
I use a storyline where each word is in a different languages
can you add donations via the lightning network?
How about trezor password manager !?
Where I can buy dices like that? I just found on eBay but I'm not sure if they are original or just replica
Hey Gabriel, typically they can be found in board game stores… or perhaps on Amazon?
Algorithm.
I know it's not related to the subject but as a french speaker, using the pronoun "one" as an undefinite pronoun is very painful to process for my brain
I agree… took me some getting used to. What I appreciate of “one” is it isn’t incriminating by design.