Live data from Hacker News

Mitro Releases a New Free and Open Source Password Manager

eff.org

71–80 of 131 posts

Re: Mitro Releases a New Free and Open Source Password Manager

#71

Currently using KeePassX + Dropbox. What sort of benefits would I get from Mitro?

Not keeping sensitive data in Dropbox.

Is there a "secure" way to get a KeePass file onto an iPhone if Dropbox isn't safe?

I don't need realtime sync, I'm happy to manually copy it across when I make changes, just curious what the proper way to do it is, if not via Dropbox.

Re: Mitro Releases a New Free and Open Source Password Manager

#72
It looks great. UI is really nice to look at.

Looking around, this has a long way to go before it is able to compete feature wise with current commercial managers.

Also, it's going to take a long time, security-wise, to get up to par with the current commercials as well. It sounds like I'm being harsh but there are a lot of possible issues to consider. An HSTS header would be a nice start......

Re: Mitro Releases a New Free and Open Source Password Manager

#73

Earlier quoted context omitted.

Not keeping sensitive data in Dropbox.

Is there a "secure" way to get a KeePass file onto an iPhone if Dropbox isn't safe? I don't need realtime sync, I'm happy to manually copy it across when I make changes, just curious what the proper way to do it is, if not via Dropbox.

SpiderOak: https://spideroak.com/

It's Snowden-approved! http://blogs.wsj.com/digits/2014/07/17/snowden-says-drop-dro...

Re: Mitro Releases a New Free and Open Source Password Manager

#74

Earlier quoted context omitted.

"Mitro has committed to funding continued operations of its servers until at least the end of 2014. If their code proves to be secure and popular with the community, we will be advising them on how to create a sustainable home for that infrastructure.". Erh. Yes, so I'll be staying on KeePass, strategically "cloud" backupped in encrypted form to my email address (also, yes, this does not solve Android integration..et…

KeePassDroid? http://www.keepassdroid.com/

I recently started using KeePass2Android [1] instead of KeePassDroid. It has some features I really like, like cloudstorage integration with Google Drive, Dropbox and more.

[1] https://play.google.com/store/apps/details?id=keepass2androi...

Re: Mitro Releases a New Free and Open Source Password Manager

#75
post #28

Earlier quoted context omitted.

Congratulations on the release guys. Would you mind talking about your strengths and weaknesses compared to KeepassX?

For starters, maybe we should ask why Mitro is only using 128­bit AES (stated in their PDF design doc)?

Because it's the most secure.

Re: Mitro Releases a New Free and Open Source Password Manager

#78

This looks really great, sadly this is the type of product where being an early adopter makes me nervous, but after a few minutes of playing with it I'm impressed with the UI. I love the functionality of LastPass, I really do, but man their UI is terrible. I trust them from a security front though and in the end that is what matters most to me. If Mitro builds up that same rep then I'll switch over, but until then wa…

Yeah, that's the thing. LP doesn't give any love to their design.

Re: Mitro Releases a New Free and Open Source Password Manager

#79
As computer people we should move away from teaching people that a strong password is one that is made up of random numbers, letters, symbols, and is hard to remember. Instead, let's teach them to create much longer passwords that are nonsensical sentences.

*You can't beat the carrot!

OR

Passwords? They're for Sundays.

Re: Mitro Releases a New Free and Open Source Password Manager

#80
The blog post says Mitro is "joining" and "transitioning" to Twitter, but doesn't say that Twitter acquired them. How does that work for Mitro's investors?

Why would Mitro join Twitter’s location team to work on "geo-related projects" instead of identity and authentication projects like "Sign in with Twitter"?

Post reply on HN