Earlier quoted context omitted.
Can you give some idea why Bitwarden is better?
free for personal use, open source, cloud synced, no device limits. and as OP mentioned different server implementations if you want to host it yourself. No idea why people stick to any of the proprietary solutions.
Lastpass Security Incident
481–490 of 587 posts
Re: Lastpass Security Incident
#482Just a reminder: if you are deciding to migrate from LastPass to something else, the password export malfunctions for unknown reasons. If you have memos, it could be a character in the memo. You must make sure the exported CSV file has everything!
This really hurt me last year, when I migrated away. I didn't realize at the time how much didn't come with, so I've been playing the reset / recovery game since.
Re: Lastpass Security Incident
#483I once started an interview process as a senior developer at Goto, the company behind LastPass. The contact was a first phone call where someone simply asked the number of experience I had in software development, Java programming, etc. I thought it was weird that basically all they got from the phone call was a bunch of numbers. The weirdest part tho what that they asked how many years of experience I had in... open…
Your ego will be your downfall.
There is so much I can learn from a developer, junior OR senior by just seeing how they implement something simple like that. I feel like you have a full fledged case of Dunning Kruger effect. Since you don't know what exactly they were looking for, you brush it off to "LeL, LaST pAsS so DuM aSsEsMeNt".
Re: Lastpass Security Incident
#484Earlier quoted context omitted.
Uh oh, now I’m paranoid my LastPass export didn’t have everything, and I deleted my account years ago
Personally, I'm more paranoid concerning whether the deletion actually worked when I deleted my LastPass three or four major security incidents ago...
Re: Lastpass Security Incident
#485I once started an interview process as a senior developer at Goto, the company behind LastPass. The contact was a first phone call where someone simply asked the number of experience I had in software development, Java programming, etc. I thought it was weird that basically all they got from the phone call was a bunch of numbers. The weirdest part tho what that they asked how many years of experience I had in... open…
Only answer to this one: Don't use inheritance (unless you're building an UI framework, and even then ...)
If thats what they are asking for, implement it, programmers and their ego always trying to "LoL, DuM iNtErViEw QuEsTiOn".
There is so much to learn from a person by just seeing how they solve a simple problem like this one.
Re: Lastpass Security Incident
#486Earlier quoted context omitted.
It's packed with enormous amount of bugs that make the day to day experience terrible. I want to move but I'm terrified of the export process
I moved to BitWarden a year ago after a billing problem with LastPass that their support handled badly. I haven't had any problems with the migrated data and I finally deleted my LastPass account last month.
Re: Lastpass Security Incident
#487Earlier quoted context omitted.
Only answer to this one: Don't use inheritance (unless you're building an UI framework, and even then ...)
The whole point is probably to weed out people who can't do it or don't understand inheritance. If thats what they are asking for, implement it, programmers and their ego always trying to "LoL, DuM iNtErViEw QuEsTiOn". There is so much to learn from a person by just seeing how they solve a simple problem like this one.
Re: Lastpass Security Incident
#488Earlier quoted context omitted.
Avoid such trouble is why I want to avoid using symbols for password. Just use more alphanum characters for strength.
I want to as well, but annoyingly there are many sites that insist on a "special" character because their strength measure says "low" for the 20 character alphanumeric string I generated %-}
Re: Lastpass Security Incident
#489Earlier quoted context omitted.
I don't use them, but my conclusion is that at least one major cloud password manager has been hacked already without any disclosure. If they disclose it, the company should logically be dead. Thus, the incentive would just be to cover it up.
Thanks to the GDPR a coverup is no longer an option.
Re: Lastpass Security Incident
#490Earlier quoted context omitted.
Only very marginally so. Or what would you say storing a (unique, long) password next to a TOTP hash actually achieves?
Well the totp (even in your passwd manager) defends against phishing I'd thought vs password alone.
In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.