Comment

Comment by Rjevski

TLDR: this site converts your 24 words into an URL encrypted with a questionable key derived from a pattern and a color (from a dozen choices or so).

This doesn't actually solve the problem of storing the resulting URL, and the added encryption can be brute forced trivially.

The author also makes the assumption that only entering the first few characters of a seed word (which is enough for the site to tell which word it is because the dictionary is limited) is effective at thwarting keyloggers. It isn't. If the site can infer which word you mean based on the first few characters, so can the attacker.

parent Rjevski 7 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton