• 0 Posts
  • 49 Comments
Joined 2 years ago
cake
Cake day: August 3rd, 2023

help-circle
  • Sure, I agree with you if it’s a password that I expect to have that use case (e.g. streaming service, home wifi network). Most of my passwords don’t though.

    As a side note, assuming that they’re equivalent length I would argue that a random password is more secure than a passphrase (of equal length) composed of dictionary words because it’s more resistant to dictionary-based password cracking. That said, the point is moot. As xkcd has shown us, length is the main thing that matters. There’s effectively no difference in practice. I always tell people “the longer the better” in either case and I recommend passphrases for secrets that have to be memorized or typed.

    That said, I think an acceptable medium would be to use a passphrase, like you’re suggesting, for a situation where entering it via a controller or remote is a legitimate use case. In fact, my password manager lets me pick and can generate passphrases or passwords. Not sure if that’s a feature in KeePass.

    For the rest of the time when I don’t need the use case, I’ll simply generate a long random password using my password manager. It’s a faster workflow integrated into the tool itself and theoretically more secure against some attacks.









  • snowsuit2654@lemmy.blahaj.zonetoTechnology@lemmy.worldRight to Root Access
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    5
    ·
    edit-2
    6 months ago

    This is my first time reading about this. I’m very curious to hear a lawyer’s thoughts on this.

    If you change the bootloader to some other software, how could the company be expected to provide support for something they may have no knowledge of? Suppose I develop some theoretical SnowsuitOS and then complain to Samsung support when it doesnt run on my smartphone? It seems very likely that some conflict in my code could be causing problems, as opposed to an issue with my hardware.

    I feel like to require this, you’d have to prove that the software is functionally equivalent to their software, right? (Side note, isn’t this problem undecidable? Program equivalence?)

    If you replace a wheel on a tractor you can pretty easily define what it should and should not do. Determining equivalence seems simpler with a physical situation. On the other hand, I’m pretty sure program equivalence is not a solved problem.

    My point here is that I don’t think it’s reasonable to legally require a software company to offer support without limits, because they cannot be sure that there is not an issue with the (unsupported) software you are using.