HN Explorer

10 comments

[ 3.2 ms ] story [ 38.9 ms ] thread
ernmcx
This is exactly what a password generator that does spy on you would say.
janalsncm
That is definitely true, but you can check for yourself on the network panel. It’s generating the passwords client-side.
beardyw
Without wishing to rain on this, there are now a number of places where information can be stored locally (local storage etc, cache) and transmitted in bulk at some point in the future. Or simply, it may be reliable today, but will it be tomorrow. It's hard.
janalsncm
That’s . . . a good point. And because of the permissions model of browsers they usually don’t have to request to store cookies or localstorage.

On a related note, the best way to destroy a hard drive is to use a plasma cutter or a nail gun.

https://youtu.be/6JPwXjCZj6o

beardyw
I'm not sure sarcasm was called for. If you are doing something related to security you need to get it right. No permissions is needed to use local storage so far as I know.

And in a separate comment I did complement you on having produced this.

https://developer.mozilla.org/en-US/docs/Web/API/Window/loca...

janalsncm
Sorry I didn’t mean it as sarcasm at all but rather a failed form of dry humor. Rereading it I can see how you would see it as sarcastic. I’ll edit the last bit, which I added because I find it independently interesting.
Blue111
I'm happy with my password manager's password generator feature (KeepassXC for Linux and KeepassDX for Android)
thinking_monkey
I looked at the page source and also the source files on Github for your project. Seem very simple and appears to do exactly what it says it will do, namely, generate a password on the client side in the browser with JS. Thanks for your effort on this.
janalsncm
Appreciate it! In the process I learned that the best way to get random numbers is with window.crypto.getRandomValues() which is supposed to be cryptographically secure unlike Math.random().
beardyw
Nice to see an uncomplicated and useful service.

Could do with a recalculate button just because. Also length adjustment doesn't recalculate.

If I set it to lowercase letters only, can it produce "password"?