You are not logged in.

#1 2015-10-12 02:35:14

Bearded_Blunder
Dodging A Bullet
From: Seat: seat0; vc7
Registered: 2015-09-29
Posts: 730

Off Topic News

Lastpass merged with LogMeIn

The consensus in the comments there seems to be it'll now go downhill. Time will tell, but just a heads-up for any other lastpass users out there.

I may end up looking for an alternate password manager if so, it's a shame, I've recommended it to so many people in the past, based both on ease of use and Steve Gibson's recommendation.


Blessed is he who expecteth nothing, for he shall not be disappointed...
If there's an obscure or silly way to break it, but you don't know what.. Just ask me

Offline

#2 2015-10-12 03:47:37

C#Coder4ever
BL Keyboard Troll
From: /dev/zero
Registered: 2015-09-29
Posts: 260

Re: Off Topic News

My favorite password manager is a notebook, then stored in an area I keep all of my other notebooks. and that's lots.


Peripheral, SBC, and router addict lmao
Keeb & SSD Discussions | GitLab

Offline

#3 2015-10-12 05:01:09

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 5,229
Website

Re: Off Topic News

C#Coder4ever wrote:

My favorite password manager is a notebook, then stored in an area I keep all of my other notebooks. and that's lots.

This. Just keeping my fingers crossed it will be OK.


John
--------------------
( a boring Japan blog , Japan Links, idle twitterings  and GitStuff )
In case you forget, the rules.

Offline

#4 2015-10-12 06:38:59

Bearded_Blunder
Dodging A Bullet
From: Seat: seat0; vc7
Registered: 2015-09-29
Posts: 730

Re: Off Topic News

C#Coder4ever wrote:

My favorite password manager is a notebook, then stored in an area I keep all of my other notebooks. and that's lots.

Works well for a PC, but I'd rather enter one reasonably secure pwd on my phone than many, special characters become a real pain...


Blessed is he who expecteth nothing, for he shall not be disappointed...
If there's an obscure or silly way to break it, but you don't know what.. Just ask me

Offline

#5 2015-10-12 10:11:32

twoion
ほやほや
Registered: 2015-08-10
Posts: 2,393

Re: Off Topic News

Bearded_Blunder wrote:

Lastpass merged with LogMeIn

The consensus in the comments there seems to be it'll now go downhill. Time will tell, but just a heads-up for any other lastpass users out there.

I may end up looking for an alternate password manager if so, it's a shame, I've recommended it to so many people in the past, based both on ease of use and Steve Gibson's recommendation.

So what? Meaningless applications shall merge together into The Most Meaningless Application.

pass(1) will never be gone.

You are storing your passwords in some kind of proprietary software you „trust“ and are worrying that something might happen to it you don't necessarily agree with which you can't just change roll back later?

hqdefault.jpg


A silent kite against the blue, blue sky

Offline

#6 2015-10-12 12:32:16

Bearded_Blunder
Dodging A Bullet
From: Seat: seat0; vc7
Registered: 2015-09-29
Posts: 730

Re: Off Topic News

I'm not wedded ideologically to FOSS I can't audit the code myself just have to rely on reputation, same as with closed apps, there's no objective reason for me to "trust" whoever may or may not have audited some open solution more or less than someone who didn't publish the src.
It comes to it I can learn to use an alternate, doubt my mother can though, she'll go back to passwords.xls (more closed src software, and not even a password protected spreadsheet).


Blessed is he who expecteth nothing, for he shall not be disappointed...
If there's an obscure or silly way to break it, but you don't know what.. Just ask me

Offline

#7 2015-10-12 14:29:01

ratcheer
Member
From: USA
Registered: 2015-10-05
Posts: 209

Re: Off Topic News

There are people who manage their passwords with GPG or PGP. It is open, cross platform, and it seems to me it should be very secure. I haven't tried this yet, but it is appealing and I may dive in when I have time for a project.

I currently use the old version of KeepassX. I do not really like the new version because it depends on .NET.

Tim

Last edited by ratcheer (2015-10-12 14:30:26)

Offline

#8 2015-10-12 14:32:29

pvsage
Internal Affairs
Registered: 2015-09-29
Posts: 1,433

Re: Off Topic News

^ The whole GPG/PGP is probably obsolete by now; I remember it was "the latest thing" back in the 1990s.


Be excellent to each other, and...party on, dudes!
BunsenLabs Forum Rules
Tending and defending the Flame since 2009

Offline

#9 2015-10-12 14:42:47

Unia
Octo-portal-pussy
From: Stockholm, Sweden
Registered: 2015-09-17
Posts: 355
Website

Re: Off Topic News

pvsage wrote:

^ The whole GPG/PGP is probably obsolete by now; I remember it was "the latest thing" back in the 1990s.

Not sure if sarcasm, or ... ?


If you can't sit by a cozy fire with your code in hand enjoying its simplicity and clarity, it needs more work. --Carlos Torres

Offline

#10 2015-10-12 14:54:28

pvsage
Internal Affairs
Registered: 2015-09-29
Posts: 1,433

Re: Off Topic News

^ NOT sarcasm.  Literally two decades old now.


Be excellent to each other, and...party on, dudes!
BunsenLabs Forum Rules
Tending and defending the Flame since 2009

Offline

#11 2015-10-12 14:57:38

tknomanzr
BL Die Hard
From: Around the Bend
Registered: 2015-09-29
Posts: 1,029

Re: Off Topic News

And still used in a lot of contexts, particularly in Linux.

Offline

#12 2015-10-12 15:16:53

pingu
Member
Registered: 2015-09-29
Posts: 128

Re: Off Topic News

ratcheer wrote:

I currently use the old version of KeepassX. I do not really like the new version because it depends on .NET.

Tim

I think it's Keepass that depends on .NET. KeepassX.2+ uses qt4 to draw the windows, just like the older versions. The difference is that v2+  has support for kdbx files whereas the previous versions only support the older keepass kdb files.

For that reason I have been using Keepass, despite the ugliness of mono, until recently when keepassx-2 was out. It didn't reach debian repos yet though...

Last edited by pingu (2015-10-12 16:16:42)


"Chuck Norris can compile syntax errors."

Offline

#13 2015-10-12 15:49:44

Unia
Octo-portal-pussy
From: Stockholm, Sweden
Registered: 2015-09-17
Posts: 355
Website

Re: Off Topic News

pvsage wrote:

^ NOT sarcasm.  Literally two decades old now.

Yea, but it is far from obsolete. That's why I was wondering if it was sarcasm or not..  tongue


If you can't sit by a cozy fire with your code in hand enjoying its simplicity and clarity, it needs more work. --Carlos Torres

Offline

#14 2015-10-12 16:39:21

redcollective
Member
From: The Wilds
Registered: 2015-09-29
Posts: 111

Re: Off Topic News

There's Pass "The standard unix password manager", anyone ever lived with it for a while? What's it like?

red


Knowledge Ferret

Offline

#15 2015-10-12 18:38:02

twoion
ほやほや
Registered: 2015-08-10
Posts: 2,393

Re: Off Topic News

pvsage wrote:

^ NOT sarcasm.  Literally two decades old now.

It's literally the most state-of-the-art FOSS implementation of the OpenPGP standard, both in terms of featurefulness and quality (in the sense that it is perhaps the most rigorously audited and peer-reviewed FOSS implementation in existence).

The rest of useful PGP implementations is closed-source and available from beloved vendors such as Symantec, encrypt your emails now for the low price of 144€.

It's one of the most important and essential pieces of (GNU) free software in existence, in the same ballpark as the Linux kernel, GNU coreutils and perhaps bash (< random list).


A silent kite against the blue, blue sky

Offline

#16 2015-10-12 20:37:06

ratcheer
Member
From: USA
Registered: 2015-10-05
Posts: 209

Re: Off Topic News

I agree with twoion, but I didn't want to argue. wink

Tim

Offline

#17 2015-10-12 21:39:26

pvsage
Internal Affairs
Registered: 2015-09-29
Posts: 1,433

Re: Off Topic News

@twoion:  Good to know.  I don't use it for personal communication because I don't handle sensitive data; I just remember briefly looking into it (on a Windows box) back when it was shiny and new.


Be excellent to each other, and...party on, dudes!
BunsenLabs Forum Rules
Tending and defending the Flame since 2009

Offline

#18 2015-10-13 08:46:00

xaos52
The Good Doctor
From: Planet of the @pes
Registered: 2015-09-30
Posts: 695

Re: Off Topic News

Mine are in a gpg passphrase protected file.
Opening the file in emacs by just
- opening the directory in emacs (which I have open all the time) using dired
- clicking on the gpg file
- entering the passphrase in the pop-up window
No need for a special-purpose program.

Offline

#19 2015-10-13 11:29:20

twoion
ほやほや
Registered: 2015-08-10
Posts: 2,393

Re: Off Topic News

xaos52 wrote:

Mine are in a gpg passphrase protected file.
Opening the file in emacs by just
- opening the directory in emacs (which I have open all the time) using dired
- clicking on the gpg file
- entering the passphrase in the pop-up window
No need for a special-purpose program.

Same here. Except that I have a subdirectory called ~/keys where there are per-login files (forums.bunsenlabs.org.gpg, forums.crunchbang.org.gpg, etc etc). Using vim-gnupg, the files are decrypted when opening them in vim, and gpg-agent takes care of keeping the key unlocked for the next 20 minutes so subsequent access is fast(er).

I have tried converting the collection to pass(1) but there are >200 files to manually import. No thank you big_smile


A silent kite against the blue, blue sky

Offline

#20 2015-10-13 17:59:46

Anaconda
crypto-anarchist
From: Quesnel BC Canada
Registered: 2015-09-29
Posts: 192

Re: Off Topic News

My favorite password manager is my own brain. No really!

But there are times when that fails. For those occasions I have a simple text file with all my passwords and account info, stored on 2 separate thumbdrives, encrypted using VeraCrypt. I really only need to remember 2 passwords. The one to log into my computer, and the one for the VeraCypyt volumes.

This is only slightly less convenient to update compared to a "password manager" and I trust the security of it.


“The university is well structured, well tooled, to turn out people with all the sharp edges worn off...." Mario Savio
"Protections for anonymous speech are vital to democratic discourse". Help enforce our right to free and anonymous speech by running a Tor relay.

Offline

#21 2015-10-13 18:14:04

C#Coder4ever
BL Keyboard Troll
From: /dev/zero
Registered: 2015-09-29
Posts: 260

Re: Off Topic News

Anaconda wrote:

My favorite password manager is my own brain. No really!

But there are times when that fails. For those occasions I have a simple text file with all my passwords and account info, stored on 2 separate thumbdrives, encrypted using VeraCrypt. I really only need to remember 2 passwords. The one to log into my computer, and the one for the VeraCypyt volumes.

This is only slightly less convenient to update compared to a "password manager" and I trust the security of it.

At least with a physical notebook it's not even connected to the net.


Peripheral, SBC, and router addict lmao
Keeb & SSD Discussions | GitLab

Offline

#22 2015-10-13 20:19:48

g33zr
Member
From: State of Confusion
Registered: 2015-09-30
Posts: 281

Re: Off Topic News

I use three "password managers": 1.) my aging brain, which remembers fewer passwords these days, but still retains the most important ones I use daily; 2.) a thumb drive, on which I keep my password data using keypassx; 3.) a hard copy printout of what's on the thumb drive. I use the hard copy to write down new and revised passwords. I update the list monthly and print out a fresh copy with each update.


What? Me worry?

Red pill or blue pill?

Offline

#23 2015-10-13 21:16:18

twoion
ほやほや
Registered: 2015-08-10
Posts: 2,393

Re: Off Topic News

Anaconda wrote:

My favorite password manager is my own brain. No really!

But there are times when that fails. For those occasions I have a simple text file with all my passwords and account info, stored on 2 separate thumbdrives, encrypted using VeraCrypt. I really only need to remember 2 passwords. The one to log into my computer, and the one for the VeraCypyt volumes.

This is only slightly less convenient to update compared to a "password manager" and I trust the security of it.

I do part-part. The most important passwords I know by heart: Main email accounts, web services, disk and system passwords. So far.

But for online-services, I usually generate a random password like so:

pwgen -sn1 16

and I can't be bothered to learn another wF9jmiCzkfkCXEbi-esque character sequence whenever I sign up for something sad Re-using passwords is a no-no.


A silent kite against the blue, blue sky

Offline

#24 2015-10-13 21:33:56

Sector11
Tpyo Knig
From: 77345 ¡#
Registered: 2015-08-20
Posts: 5,274

Re: Off Topic News

twoion wrote:

Re-using passwords is a no-no.

I was surprised to learn that people still use one password for everything

pwgen -sn1 16 ««---»» thanks for this twoion ... I usually go nutz trying to figure out a password.


BunsenLabs Forum Rules ---== I'm a Conky 1.9'er ==---
System:    Host: s12 Kernel: 3.16.0-4-amd64 x86_64 (64 bit gcc: 4.8.4)
Desktop: Openbox 3.5.2 dm: (startx) Distro: Debian GNU/Linux 8

Offline

#25 2015-10-13 22:43:03

glittersloth
...always giving it to you straight
Registered: 2015-09-30
Posts: 745

Re: Off Topic News

Didn't Lastpass get their muffler hacked earlier this year? Or was that 1password?

Offline

Board footer

Powered by FluxBB