Urghhh So When Is Live 11 Coming?

[THA-REAPER]

We've all been waiting like forever since 10 released. Any ideas?

[Tarekith]

Tuesday.

[cskracer]

You've got that setup as a macro haven't you?

[THA-REAPER]

Yep right in chrome. One click per day. This is the 3rd.

[Angstrom]

Live 8 : April 2009

Live 9 : March 2013

Live 10: February 2018

Live 11: January 2025

[jestermgee]

Live 8 : April 2009

Live 9 : March 2013

Live 10: February 2018

Live 11: January 2025

Ha, that makes the upgrade price a bargain for 7 years of updates. What are people complaining about

[H20nly]

What are people complaining about

something - always.

[Forge.]

What are people complaining about

something - always.

I was video skyping my parents in London on my little iPhone commenting on how my 10 year old self in 1986 expected the future to look, and how cool I would have thought that was, but all that really happens is you get old and fat and spend most of your time complaining about everything.

Mind you, they never told us about passwords. The constant torment of passwords is something that occasionally makes me wonder if I am actually dead and in the forgotten password circle of hell.

[fishmonkey]

password manager! it's the way of the future!

at least until we can unlock everything with retinal scans, and people start ripping out your eyeballs to steal your stash of spare kidneys...

[Forge.]

I have last pass. It helps in some ways, but makes other things worse.

Here's a neat sanity (or circle of hell) test: if you have a number of Apple devices (4 is a good number for this exercise), try changing your Apple ID without signing out of iCloud (& 'find my mac/phone/etc') on any of them first. For bonus points, use a 24+ character lastpass (or equivalent) generated secure password with all characters including symbols. Don't be fooled by the 'sign out of all devices' ruse. It's a trap intended to lure you into the abyss. Extra points for trying to beat it by using 'find my iphone' to wipe one or more of them, in the foolish delusion that it will somehow make it easier, before realising you then need the securely generated 24+ character lastpass password to get into iTunes to download F$##&&! lastpass. Entering that password with all it's 24+ characters and symbols on an old iPhone being used as an overqualified iPod, inevitably getting at least one character wrong on the first couple of tries, quickly dulls any potential sense of humour about the situation.

I was caught in a never-ending loop that honestly made me to question whether I had in fact died and ended up in an undiscovered contemporary circle of Dante's inferno.

Apple can shove it up their collective arses and phuq off while they're doing it.

[H20nly]

the problem with password managers is that they enable people to forget their passwords.

if i have to rely on a single point of failure for all of my passwords... i'd rather it be my mind.

also, a lot of what we thought we knew about what constitutes a strong password has been a myth that only served to perpetuate overly complex passwords. using a mix of letters, numbers, and symbols in my passwords is muscle memory to me at this point, but a straight phrase like these make just as effective passwords;

thebankingwebsiteiloathe
whereigotopaymycreditcard
theplacewhereigetmyemail

a few years back i finally accepted the fact that 5ish or so passwords that i use simply cannot be used on everything. otherwise, compromising the password to one website would compromise roughly 1/5 of my passwords. so i started using a method where everything has a different password, but it can all be remembered because i leave myself hints in the password itself and there is a core password in the midst of that. i would elaborate further, but let's face it... that would be fucking stupid.


back on topic;

Tuesday.

[Tarekith]

Yeah, it's a shame we're required to have such complicated passwords these days when now we know that simple but longer passwords are just as effective, if not more so. I do it similar to you H2O. I have one core password I use for everything, but then I tack on something at the beginning or end of it to make it website (or use) specific.

For instance, my core password my be "p4s$word", but then for this site I'll use the last two letters of the web addy at the end to make it "p4s$wordon". Or it might be "p4s$wordlaptop" to unlock my computer. That way I only have to remember one password myself, and then just look at the web addy to see what the rest of it is. Easy to remember, and I still have a different password for every site.

(this scheme is only similar to how I really do it, but it shows the concept)

[Angstrom]

there's no good reason to remember passwords, only to have them be type-able on a phone.

I just use a password manager and the the http://correcthorsebatterystaple.net/ method (relevant XKCD)

something like "Tg%r4A8A_t6T" is painful to type, but "Solid-Actress-Model-Husband-9" is both easier and more secure.

The "core password" strategy is not a good one. lets say you register an account with bensonsplugins.com and u:[email protected] p:pumpernasty_benso3, and you have an account on soundcloud u:[email protected] p:pumpernasty_soundclo1

Now, bensonsplugins.com database gets pwned, and so does soundcloud and the plaintext u&p auth logs are posted.
how difficult do you think it would be to guess your password for ableton.com ?
very easy
I could extrapolate from those two pwned accounts, and if I have three then it's very likely your password is p:pumpernasty_abletoINT

https://haveibeenpwned.com/Passwords

[H20nly]

i see your point in the scenario you described... but it's assuming a few things

1. that Tarekith would make it so obvious
2. that anyone would take the time to cross reference
3. that the same email/username is being used
4. that at the end of the day it matters

i use more than one core password, depending on what i'm doing. also, in your example the core kind of jumps out at you (which makes sense because... it's a great example).

here's what i am getting at... let's assume that the core password is Fr0gSp4wn

so when i browse to my bank i could use
baFr0gSp4wnnk

when i pay my visa
viFr0gSp4wnsa

in this scenario you would have to setup a filter, if my bank and visa card got pwnd, that would would use a left or right type function and guess exactly how many characters that function should exclude (2) so that the query could find the pattern in the middle... AND have access to both of those lists.

i feel as though the vulnerability you described is more of a suffix than a prefix issue.

so let's take it up a notch and introduce that third account... right here at Ableton.

ablFr0gSp4wneton

now, we have 3 characters as prefix and 4 as a suffix.

your filter broke brother

back to point 4. above... not all accounts matter to us as much as others. i treat my bank account password much more seriously than i treat my Ableton password. i also use different usernames. so you could maybe take a portion of my accounts but not all of them.

[fishmonkey]

the passwords that i rarely if ever need to type, i let my password manager generate a silly one.

ones that i do need to sometimes manually enter, i will use some kind of pattern or mnemonic as the base.

https://haveibeenpwned.com/