Live data from Hacker News

Mitro Releases a New Free and Open Source Password Manager

eff.org

31–40 of 131 posts

Re: Mitro Releases a New Free and Open Source Password Manager

#31

Since the company has been acquired what are the plans for the service? http://labs.mitro.co/ says that "The service will continue to operate as-is for the foreseeable future." but there is a lot of ambiguity in 'forseeable.' While I really appreciate the value of having the client and server code open sourced I don't want to run my own server nor do I want to sign up for a service that, with the changes that will li…

"Mitro has committed to funding continued operations of its servers until at least the end of 2014. If their code proves to be secure and popular with the community, we will be advising them on how to create a sustainable home for that infrastructure.". Erh. Yes, so I'll be staying on KeePass, strategically "cloud" backupped in encrypted form to my email address (also, yes, this does not solve Android integration..et…

thanks - swear I didn't notice that my first time through

Re: Mitro Releases a New Free and Open Source Password Manager

#34

This looks really great, sadly this is the type of product where being an early adopter makes me nervous, but after a few minutes of playing with it I'm impressed with the UI. I love the functionality of LastPass, I really do, but man their UI is terrible. I trust them from a security front though and in the end that is what matters most to me. If Mitro builds up that same rep then I'll switch over, but until then wa…

I'm with you on that - I'm an early adopter for many, many things, but security software is not one of them. I'm happy to play with it a little, but I'm not certainly going to migrate my passwords until it's show to be relatively reliable (and long-lived)!

Re: Mitro Releases a New Free and Open Source Password Manager

#35

Currently using KeePassX + Dropbox. What sort of benefits would I get from Mitro?

Currently, this is the best option. Though I recommend KeePass proper as opposed to X since KeePassX's last stable release was over 4 years ago and they've only pushed out alpha builds since then.

Unfortunately, if you want to run on Linux, KeePassX is the best choice. KeePass "proper" does work on Linux under Mono, but the UI is pretty buggy (textfields don't render the cursor in the right place, and the UI just looks awful in general). I really do wish there was a better native Linux client - some new features would be nice.

Re: Mitro Releases a New Free and Open Source Password Manager

#36

This looks really great, sadly this is the type of product where being an early adopter makes me nervous, but after a few minutes of playing with it I'm impressed with the UI. I love the functionality of LastPass, I really do, but man their UI is terrible. I trust them from a security front though and in the end that is what matters most to me. If Mitro builds up that same rep then I'll switch over, but until then wa…

Aw, thanks for the UI love, nicpottier! I appreciate the support.

Re: Mitro Releases a New Free and Open Source Password Manager

#38
post #28

Earlier quoted context omitted.

Congratulations on the release guys. Would you mind talking about your strengths and weaknesses compared to KeepassX?

For starters, maybe we should ask why Mitro is only using 128­bit AES (stated in their PDF design doc)?

Please see the answer by cryptographer Thomas Pornin on AES 128 vs 256: http://security.stackexchange.com/questions/14068/why-most-p...

Re: Mitro Releases a New Free and Open Source Password Manager

#39

This looks really great, sadly this is the type of product where being an early adopter makes me nervous, but after a few minutes of playing with it I'm impressed with the UI. I love the functionality of LastPass, I really do, but man their UI is terrible. I trust them from a security front though and in the end that is what matters most to me. If Mitro builds up that same rep then I'll switch over, but until then wa…

The UI is indeed awesome. I'd love to see a little more development on the features (doesn't support wildcard domains, for example). But it's definitely a great starting point to work on.

Aw, your comment about the UI made my day. Wildcard domains didn't come up at all as a use case—interesting you bring it up. Since it's open source now, I'll upload the rest of the UI design that hasn't been implemented yet which supports a few other features. Anything else you'd like to see?
Post reply on HN