Live data from Hacker News

Last Pass Hacked

bloomberg.com

31–36 of 36 posts

Re: Last Pass Hacked

#31
post #17

Earlier quoted context omitted.

Is there a convenient way to sync it across multiple devices?

Yeah, I just use Google Drive. I know Syncthing is also one option many people like.

Ah, so it's basically the "sync an encrypted database file" model that 1password used to use until their recent migration to their own cloud service?

I used to use that as well, but I've since come around to the idea of having a sync server that is a bit more than just a file relay. It complicates the security model a bit, but it allows using browser extension only clients (without needing to give them access to my file syncing account), rate limiting, 2FA, a higher chance of being able to rotate the passphrase without leaving copies of the old database hanging around everywhere, password sharing and much more.

In my view, it's worth the tradeoff.

Re: Last Pass Hacked

#32
post #17

Earlier quoted context omitted.

Or KeePass/KeePassXC which requires no hosting and is also free.

Is there a convenient way to sync it across multiple devices?

I sync via dropbox and store my kbdx inside a VeraCrypt container.

Re: Last Pass Hacked

#33
post #17

Earlier quoted context omitted.

Or KeePass/KeePassXC which requires no hosting and is also free.

Is there a convenient way to sync it across multiple devices?

ssh and a procedure to merge in changes occasionally (if you need to support edits on all endpoints)

Re: Last Pass Hacked

#36

Again? At this point, I would think the only people willing to use them are the people who don't keep up with this kind of news, which is a lot of people I guess.

or people who can't/won't make the time to switch to something else. (it took me four hours to switch to 1Pass from LastPass many years ago)
Post reply on HN