Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mitro Releases a New Free and Open Source Password Manager

eff.org

Post reply on HN
Print view View original

91–100 of 131 posts

Re: Mitro Releases a New Free and Open Source Password Manager

#91

Post by dmacvicar »

drvortex wrote: post #83
vijayp wrote: post #2

We're very excited to make this available to the community and welcome pull requests, bug reports, etc.. Pitch in on Github: https://github.com/mitro-co/mitro

I liked the idea of a free and open-source password manager. It seems that Mitro has been around for nearly a year.[1]. It does not seem anywhere near as mature as Lastpass though. There are no additional features such as a credit card or notes store. Also, it seems buggy since I was only able to login once through the Chrome extension. I guess I will stick with Lastpass for now.

Main feature from Lastpass that I use and I would miss is Yubikey support (http://www.yubico.com/products/yubikey-hardware/yubikey/)

Re: Mitro Releases a New Free and Open Source Password Manager

#92

Post by SideburnsOfDoom »

JungleGymSam wrote: post #79

As computer people we should move away from teaching people that a strong password is one that is made up of random numbers, letters, symbols, and is hard to remember. Instead, let's teach them to create much longer passwords that are nonsensical sentences. *You can't beat the carrot! OR Passwords? They're for Sundays.

> let's teach them to create much longer passwords that are nonsensical sentences.

Doesn't matter; nobody is going to remember fifty different ones. I have more website logins that that. Password reuse is going to happen and it is bad.

The only secure way is for each password to be made up of a unique long, generated string of "random numbers, letters, symbols" for maximum entropy and stored in a password manager. The user just has to remember the password manager's master password (and maybe a desktop PC login). Now these remaining memorised passwords can be long nonsensical sentences if need be.

Re: Mitro Releases a New Free and Open Source Password Manager

#93

Post by reedlaw »

zellyn wrote: post #81
k2enemy wrote: post #69

I'll use this as an opportunity to give a shout out for my new favorite password manager: pass [0] It uses gpg to encrypt passwords that are then stored locally, but can be synced using Dropbox, rsync, unison, etc. It is a command line program, so it doesn't have things like browser integration, but on a mac, a little Automator magic alleviates most of that pain. Besides, after trying 1password, lastpass, and a few o…

Very nice, but: 1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1password's integration with the browser is very helpful: since I've been using a linux box as my day-to-day machine (where 1password doesn't have a native version), I've been using it significantly less, because it adds friction. On Mac OS, I would just auto-gen a hor…

I'd love to find a way to securely share passwords with mobile devices. But from what I understand, there's no very secure way to do it on Android. If you store a private key on the device then other applications may have access to it. And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. An ideal solution would allow selective sharing because there are some secrets you wouldn't want stored on your mobile device.

Re: Mitro Releases a New Free and Open Source Password Manager

#94

Post by Rapzid »

isaacdl wrote: post #35
JohnTHaller wrote: post #27

Earlier quoted context omitted.

Currently, this is the best option. Though I recommend KeePass proper as opposed to X since KeePassX's last stable release was over 4 years ago and they've only pushed out alpha builds since then.

Unfortunately, if you want to run on Linux, KeePassX is the best choice. KeePass "proper" does work on Linux under Mono, but the UI is pretty buggy (textfields don't render the cursor in the right place, and the UI just looks awful in general). I really do wish there was a better native Linux client - some new features would be nice.

I use Keepass2 exclusively now(started using it this past year due to needing windows and cloud sync support) and have had no major issues across linux and windows. I guess YMMV, but it's been a great success for me.

Re: Mitro Releases a New Free and Open Source Password Manager

#95

Post by jtheory »

frakkingcylons wrote: post #18

The secret sharing across teams works which is good (LastPass's organization features are broken), but saving secrets is very slow right now.

We use LastPass internally, specifically to share long random passwords among the people that need them.

It's not been a flawless experience, but it works -- what are the problems you've seen?

Re: Mitro Releases a New Free and Open Source Password Manager

#96

Post by jtheory »

SideburnsOfDoom wrote: post #65
andrey-p wrote: post #44

Earlier quoted context omitted.

Even if it's encrypted?

http://www.theguardian.com/technology/2014/jul/17/edward-sno... https://www.techdirt.com/articles/20130620/15390323549/nsa-h...

The KeePass database is strongly-encrypted before you put it up on Dropbox, so you're not relying on Dropbox's own encryption (I wouldn't either).

Re: Mitro Releases a New Free and Open Source Password Manager

#97

Post by buyx »

JungleGymSam wrote: post #79

As computer people we should move away from teaching people that a strong password is one that is made up of random numbers, letters, symbols, and is hard to remember. Instead, let's teach them to create much longer passwords that are nonsensical sentences. *You can't beat the carrot! OR Passwords? They're for Sundays.

FNB South Africa is a bank that has horribly complex rules for passwords - no repeated letters, no sequential letters, in addition to the normal password strength requirements.

Given the complexity, many people I know just save their passwords in plain-text.

Re: Mitro Releases a New Free and Open Source Password Manager

#98

Post by wastedhours »

cpeterso wrote: post #80

The blog post says Mitro is "joining" and "transitioning" to Twitter, but doesn't say that Twitter acquired them. How does that work for Mitro's investors? Why would Mitro join Twitter’s location team to work on "geo-related projects" instead of identity and authentication projects like "Sign in with Twitter"?

"Soft landing" "acquihire"?

Re: Mitro Releases a New Free and Open Source Password Manager

#99

Post by 0xeeeeeeee »

reedlaw wrote: post #93
zellyn wrote: post #81

Earlier quoted context omitted.

Very nice, but: 1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1password's integration with the browser is very helpful: since I've been using a linux box as my day-to-day machine (where 1password doesn't have a native version), I've been using it significantly less, because it adds friction. On Mac OS, I would just auto-gen a hor…

I'd love to find a way to securely share passwords with mobile devices. But from what I understand, there's no very secure way to do it on Android. If you store a private key on the device then other applications may have access to it. And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. An ideal solution would allow selective sharing because there are some secrets you…

Applications are separated by Linux permissions on android. Attempting to read or write to other application directories simply won't work. Your fear is not correct for the average case user

Re: Mitro Releases a New Free and Open Source Password Manager

#100

Post by elithrar »

reedlaw wrote: post #93
zellyn wrote: post #81

Earlier quoted context omitted.

Very nice, but: 1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1password's integration with the browser is very helpful: since I've been using a linux box as my day-to-day machine (where 1password doesn't have a native version), I've been using it significantly less, because it adds friction. On Mac OS, I would just auto-gen a hor…

I'd love to find a way to securely share passwords with mobile devices. But from what I understand, there's no very secure way to do it on Android. If you store a private key on the device then other applications may have access to it. And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. An ideal solution would allow selective sharing because there are some secrets you…

> And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working.

iOS8 makes it possible (thankfully!): http://blog.agilebits.com/2014/07/30/introducing-the-1passwo... - although I'm not sure how it'll work if you store your keychain on Dropbox.

Post reply on HN