Probably, yes, I don't understand you. Can you tell me more?
You use a password + salt and hash them for creating new password?
How did you manage to enter a password without access to any hash functions? Or you remember the hashes?
The few most important hashes I already remember. I also have my website with simple hash calculator in javascript and virtual keyboard.
Yeah! Well we found a breach in your security strategy
Actually, you either have to remember passwords-hashes (but you can not remember a lot of hashes), or hash them on computer under your control (then you can just write down your password on this computer without any hashing), or give your password to someone else's computer to get the hash what you need (totally insecure method).
Like I said, you can simply encrypt the home dir with the same result.
I prefer to simply do not use a passwords.
Of course, I absolutely agree. But do you prefer to use *nothing* than passwords?
Don't juggle! I suggest using one password instead of several useless annoing passwords.
It is the main concern I'm speaking again and again here. I'm ABSULUTELY agree with you that passwords are not good enough and I use PAM and private/public keys everywhere it is possible. But I will use password rather than leaving my money in plaintext. Agree?
I am wait for your answer and we compare our methods.
I didn't say it is not possible or that YOU cannot do that. I see that on bitcoin forum are 90% people geeks and 10% libertarians (which are not both geeks and libertarian). So you probably know how to do memory overflow. But I'm telling you there are tens of thousands of sysadmins which does not know how to do memory overflow but know how to do copy&paste. Again, passwords are better than nothing.
My opinion: 5% geeks, 5% libertarians and 90% SEO-moneymakers-HYIP-investors-etc.
First two are able to use cryptography and such stuff. Second I'm not interested, but for them nothing is to cost to encrypt sections of their home dir for secure their private data
