<story><title>New security issue at Dropbox</title><url>http://pastebin.com/yBKwDY6T</url></story><parent_chain></parent_chain><comment><author>Jasber</author><text>A slight tangent...&lt;p&gt;I recently looked into password managers myself after the MtGox leak. I tried 1Password and LastPass. While both do what they say--I found them cumbersome to use.&lt;p&gt;I settled on a scheme like this:&lt;p&gt;E-mail: Very strong, completely unique. 2-factor auth. If you have my e-mail, it&apos;s game over.&lt;p&gt;Bank: Very strong, completely unique.&lt;p&gt;The rest of the passwords I&apos;ve broken down into tiers. I&apos;ve memorized a password for each tier combined with a hashing algorithm stored in my head.&lt;p&gt;The theory here being if an entire tier gets compromised (someone figures out my hashing scheme), at the very worst I lose the entire tier.&lt;p&gt;This does keep me safe from automated attacks, but not if someone singled me out individually. Which in that case, I&apos;ve got other problems.&lt;p&gt;This isn&apos;t perfect, but it gives me a couple of things I really value:&lt;p&gt;- Keep all passwords in my head&lt;p&gt;- Unique passwords on each site&lt;p&gt;- Tiered passwords so if someone figures out my hashing scheme, they only get that tier&lt;p&gt;I like the idea of password managers, but in practice they were too much hassle for me.</text></comment>
<story><title>New security issue at Dropbox</title><url>http://pastebin.com/yBKwDY6T</url></story><parent_chain></parent_chain><comment><author>eli</author><text>&quot;&lt;i&gt;there was a very brief glitch and this should never happen/be possible again. thanks for the email.&lt;/i&gt;&quot;&lt;p&gt;Yikes</text></comment>