Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LogMeIn acquires Lastpass

blog.lastpass.com

Post reply on HN
Print view View original

341–350 of 443 posts

Re: LogMeIn acquires Lastpass

#341

Post by derobert »

bad_user wrote: post #232
quaunaut wrote: post #101

Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically. * They still don't have access to my raw passwords. Everything's already encrypted before it gets to them, and they don't have the key. They just store the encrypted data. * They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I…

LastPass has a web interface, is also available as a browser plugin and when I tried it the only password they asked for was my account password. So how come they don't have your raw passwords? Because of their web centric approach, I doubt that they are encrypting it locally. And regardless, LastPass is a proprietary thing, so you can consider your passwords to be compromised anyway.

There is an official, open-source lastpass CLI client: https://github.com/lastpass/lastpass-cli

Re: LogMeIn acquires Lastpass

#342

Post by sagawee »

Quiark wrote: post #300
sagawee wrote: post #248

My homegrown alternative to password managers like LastPass and 1Password: An encrypted zip file. The zip contains * encrypt.sh * payload, a folder containing subfolders, password text files and other personal information. To "unlock", extract the zip. To "lock", run encrypt.sh. Make sure that the extracted data won't get backed-up at any time. I just came up with this a few days ago. Let me know if you have any conc…

I would avoid using .zip file format encryption, who knows how safe that is. PGP as encryptor would probably be a better choice.

It depends on what you use to create the .zip file. The zip command uses the insecure PKZIP algorithm. 7z supports AES-256 encryption.

Re: LogMeIn acquires Lastpass

#343

Post by andrewpi »

arca_vorago wrote: post #275
badloginagain wrote: post #270

Earlier quoted context omitted.

If it's for an organization you should probably use KeePass, as all the data is kept locally by the organization. Allowing any third party access to sensitive passwords sounds like a bad idea.

I prefer KeePassX instead, so keep it in mind as well. While I wish there was an official version for mobile and it integrated into the browser, I almost like the separation as I've gotten used to it.

KeepassDroid (for Android) and MiniKeePass (for iOS) both work well.

Re: LogMeIn acquires Lastpass

#344

Post by uean »

I'm also not pleased by this news, given the track record of Logmein and how they butchered Hamachi (mind you, that was years ago), the price gouging and increases to the Pro and Central customers, etc...

I could grumble for awhile, but I do see one positive change I think will be made quite soon - Lastpass Enterprise did struggle to pass passwords through remote sessions (to a client server, for example). We played with using Thycotic Secret Server, but Lastpass Enterprise is better in so many other ways that we dealt with copy/pasting passwords into the remote session. If Logmein can bring Lastpass integration through their remote tools I'll be really happy, and I think it will drive people back to Logmein who left over the past few years price gouging.

That all said... Logmein was really really terrible about grabbing the clipboard of any user who had recently connected and hanging onto it. 'Pasting' into a session often splooged some other guys clipboard contents (funny jokes, personal password, embarassing URL)...

Re: LogMeIn acquires Lastpass

#345

Post by burnte »

shlant wrote: post #212
microtonal wrote: post #128

Earlier quoted context omitted.

This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior). Did you try 1Password (which works with Dropbox, Wifi sync, etc.)? Not affiliated with them, just a happy customer.

I actually did an evaluation of password storage services recently and chose LastPass over 1Password for a couple reasons: 1. 1Password is SUPER expensive for what it is. You really pay for the fact that it looks nice and integrates well with mac. 2. It has no enterprise level features (This is for my organization) such as user management, access logging and fine grained roles and sharing. 1Password might be good for…

As a primarily Windows/Android/iOS user, I bought it and find it much better than LastPass, which I also paid for. I do have it on my Macs, but I use those about 10% of the time, I'm mostly Win/Android/iOS. It works great across all the platforms I use.

Re: LogMeIn acquires Lastpass

#346

Post by bognition »

Eva_Schweber wrote: post #290
microtonal wrote: post #128

Earlier quoted context omitted.

This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior). Did you try 1Password (which works with Dropbox, Wifi sync, etc.)? Not affiliated with them, just a happy customer.

Hi danieldk, My name is Eva Schweber and I work for AgileBits, the makers of 1Password. I just wanted to thank you for sharing your love of 1Password with the other folks on this thread!

Any chance you guys are going to run a promotion?

Re: LogMeIn acquires Lastpass

#347

Post by Oletros »

shinratdr wrote: post #335
Oletros wrote: post #235

Earlier quoted context omitted.

I use LastPass on Android, Windows and OS X, that means at least $80.

Then by all means, please continue trusting a complete database of the most valuable information in your life to the lowest bidder.

Which lowest bidder?

Re: LogMeIn acquires Lastpass

#348

Post by Eva_Schweber »

ntucker wrote: post #322
Eva_Schweber wrote: post #290

Earlier quoted context omitted.

Hi danieldk, My name is Eva Schweber and I work for AgileBits, the makers of 1Password. I just wanted to thank you for sharing your love of 1Password with the other folks on this thread!

You guys might want to see if you can do a better job of publicizing the LastPass import. I googled for it and found some of your support forum threads where users had contributed scripts to do it, and I thought that was a bit iffy, so I resolved to deal with it later. I then saw another comment here that clued me in to the fact that LastPass has an 'export' feature that you guys can import from. 60 seconds later, it…

Hi ntucker,

My name is Eva Schweber and I work for AgileBits, the folks who make 1Password.

That's a great suggestion, thank you. And thank also for the good wishes. It has certainly been a busy day!

Re: LogMeIn acquires Lastpass

#349

Post by Eva_Schweber »

bognition wrote: post #346
Eva_Schweber wrote: post #290

Earlier quoted context omitted.

Hi danieldk, My name is Eva Schweber and I work for AgileBits, the makers of 1Password. I just wanted to thank you for sharing your love of 1Password with the other folks on this thread!

Any chance you guys are going to run a promotion?

Hi bognition,

Just to be clear who I am, I am repeating that I am Eva Schweber and I work for AgileBits, the folks who make 1Password.

And to answer your question, yes. We have put all of our apps (including our in-app purchases) on sale for 40% off.

Post reply on HN