Security Basics mailing list archives

RE: Tor and Passwords


From: "M. Shirk" <shirkdog_list () hotmail com>
Date: Tue, 26 Jul 2005 16:11:22 -0400

The general opinion would be, you as vulnerable with your current route through your ISP as you are through Tor. Encrypted protocols are a requirement.

Shirkdog
http://www.shirkdog.us



From: JM <ubahmapk () gmail com>
Reply-To: JM <ubahmapk () gmail com>
To: security-basics () securityfocus com
Subject: Tor and Passwords
Date: Fri, 22 Jul 2005 23:42:34 -0500

With all the latest buzz about Tor [1], what is the security
industry's general opinion about password security and Tor anonymizer
service?  Any fears of username/password harvesting?  I mean, I can
come up with really good, long, random character passwords [2] for
each and every site/server, but what good is it if some "anonymizing"
router out there is logging them all??  Is this a realistic
possibility?

thanks.

[1] http://tor.eff.org
[2] http://keepass.sourceforge.net/

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


Current thread: