Live data from Hacker News

LogMeIn acquires Lastpass

blog.lastpass.com

151–160 of 443 posts

Re: LogMeIn acquires Lastpass

#151
Some of these tools (1Password in particular) seem geared toward individual password management. And LastPass wasn't exactly user-friendly. What are you using for group/team password management?

Re: LogMeIn acquires Lastpass

#152
I've been using an excel workbook that is stored in an encrypted image as my ways to manage passwords.

How are these services that people mention in the comments, better at doing the same?

Is there a better way someone has come up with to manage passwords where you don't have to rely on these services?

Re: LogMeIn acquires Lastpass

#153

This is pretty terrible news. It would have been need to see LastPass get acquired by a company like AWS but LogMeIn doesn't really have the reputation required to ask people to trust them with all their passwords. Also, the valuation also seems low to me. Maybe LastPass was having trouble generating recurring revenue. It seems like going public would be a better route for security companies but maybe the revenue was…

We were in a similar situation a few months ago when Mitro announced that they were shutting down their service.

Mitro's owner being really nice, they open-sourced the browser extensions, server and mobile applications so we used them to run our own: https://passopolis.com/

We plan to keep the code open-source and we're working hard at the moment to introduce the organisation feature useful for start-ups. We plan to make the organisation feature a premium service so we can justify running and improving Passopolis for as long as it stays useful.

Re: LogMeIn acquires Lastpass

#154

Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically. * They still don't have access to my raw passwords. Everything's already encrypted before it gets to them, and they don't have the key. They just store the encrypted data. * They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I…

> "They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things."

I've never really understood the appeal of account-based password managers. It was a startup and it needed a business model, sure, so from the company's perspective it makes sense. But from a customer's perspective you're accepting a new type of risk that you don't have to worry about if you use a glorified encrypted list (e.g. KeePass) to manage passwords. The payoff is convenience, but personally no amount of convenience is enough to make me comfortable with storing all of my encrypted passwords on a single server somewhere and hoping that there are no exploitable security vulnerabilities (or malicious insiders who might seek to profit from finding or introducing them). Having an offline password manager that never uploads data to a server provides defense in depth, though it's less convenient.

Re: LogMeIn acquires Lastpass

#155

Earlier quoted context omitted.

This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior). Did you try 1Password (which works with Dropbox, Wifi sync, etc.)? Not affiliated with them, just a happy customer.

I tried it for all of a week in the past. It's the top one I'm looking at moving to, but honestly the reviews that have been done by users of both are lacking on information, so I don't know what I'm giving up.

Even on Android 1Password feels like a first class citizen (I think some third party app integration is lacking but i'm used to going back and forth to copy passwords). I am very happy with what it provides.

Re: LogMeIn acquires Lastpass

#156

I'm thinking about going with KeePass. I don't want to deal with this again with 1Password if/when they get bought.

I think there is an important difference between LastPass and 1Password: 1Password stores data in a folder you point it to. It is never in any form transferred to their servers.

Are there open source "clients" that can access the 1Password data I store locally?

Re: LogMeIn acquires Lastpass

#159

FWIW, regarding the ongoing complaints about the LP UI, they just released a beta update to their chrome extension a couple days ago. Still a ways to go, but they are/have been clearly working on the end user experience. https://chrome.google.com/webstore/detail/lastpass-prebuild-...

That actually seems to be quite the improvement. The vault actually seems useful now and doesn't look like a poorly built app from 2002. Thanks for sharing

Re: LogMeIn acquires Lastpass

#160

I've been using an excel workbook that is stored in an encrypted image as my ways to manage passwords. How are these services that people mention in the comments, better at doing the same? Is there a better way someone has come up with to manage passwords where you don't have to rely on these services?

Mainly in the user experience, not having to deal with setting up and backing up a personal encrypted store, and the ability to access the same data from multiple machines.

The cost, of course, is in the data being remote, and you generally have to trust the company and processes around their handling of your data.

Post reply on HN