131–140 of 311 posts
Earlier quoted context omitted.
Switched to LastPass from 1Password a year or so ago because of linux support. Haven't minded. I like 1Password more (just because of the prettier UI), but LastPass is good enough.
Does 1password work on android and ios now?
I commend them for their honesty, so thanks for the heads up :) One thing i noticed: They used quite a few german words ("dennoch", "jedoch", "dann") which i haven't seen used elsewhere up to now. Is that common? I know that quite a few words are used commonly in English like "kindergarten" for instance, but this is the first time i've seen those in an english blog...
See quite a few nods to 1Password in here, which is good, although I tend to favor KeePass myself, given that it's FOSS. It also has a way better Firefox add-on than any of the others I've seen (which is my main browser), and the Android apps, if unofficial, aren't bad either [0]. Importantly, they feature the ability to either pull from a local Keepass DB or to get it from a connected Google Drive account. I've take…
See quite a few nods to 1Password in here, which is good, although I tend to favor KeePass myself, given that it's FOSS. It also has a way better Firefox add-on than any of the others I've seen (which is my main browser), and the Android apps, if unofficial, aren't bad either [0]. Importantly, they feature the ability to either pull from a local Keepass DB or to get it from a connected Google Drive account. I've take…
I don't understand why 1Password's approach to the cloud - syncing via Dropbox or Google Drive - is considered that much more secure than LastPass. If anything relying on Dropbox has always seemed to me to be a huge liability
http://angel.net/~nic/passwdlet.html
Storage is unnecessary. LastPass, 1Password... every one of them has centralized storage. No one needs a central server, but a central server is the only way a "service" can sell itself.
Earlier quoted context omitted.
"Answer unclear, ask again later"
I get why they can't provide details. But a close read of that incident report doesn't answer whether they even know how it happened. Did I miss something?
If LastPass says "Attackers took everything" when the attackers only took a few non-identifiable pieces of info; it will be a huge non-recoverable media event about attackers taking everything even if it's not true.
If LastPass say "Attackers didn't do anything" but stole a lot of sensitive info, then it makes LastPass look incompetent.
This is really a situation where they need to understand the scope of the situation before making a detailed comment.
Earlier quoted context omitted.
The KeePass database itself is encrypted with a Master Password/Password Phrase. You can take a look at the encryption they use for it here: http://keepass.info/help/base/security.html#secencrypt Hence, I am reasonably confident that even if Google were to turn over my Drive account to the NSA, they wouldn't be able to crack open the database. See also: discussion on feasibility of brute forcing a KeePass database: h…
That's no different to how LastPass stores your vault on its servers, isn't it? They're just using their own cloud instead of Google's.
Earlier quoted context omitted.
Switched to LastPass from 1Password a year or so ago because of linux support. Haven't minded. I like 1Password more (just because of the prettier UI), but LastPass is good enough.
Does 1password work on android and ios now?
Earlier quoted context omitted.
That's no different to how LastPass stores your vault on its servers, isn't it? They're just using their own cloud instead of Google's.
When thinking about security who has more resources and expertise? LastPass or Google?
And then the NSA is trying to crack it
Earlier quoted context omitted.
I don't understand why 1Password's approach to the cloud - syncing via Dropbox or Google Drive - is considered that much more secure than LastPass. If anything relying on Dropbox has always seemed to me to be a huge liability
If you wanted security, you'd use a SHA256 hash of a master-password + domain name. http://angel.net/~nic/passwdlet.html Storage is unnecessary. LastPass, 1Password... every one of them has centralized storage. No one needs a central server, but a central server is the only way a "service" can sell itself.
You linked to the old version btw. Updated version is here: http://angel.net/~nic/passwdlet.domain.html
I commend them for their honesty, so thanks for the heads up :) One thing i noticed: They used quite a few german words ("dennoch", "jedoch", "dann") which i haven't seen used elsewhere up to now. Is that common? I know that quite a few words are used commonly in English like "kindergarten" for instance, but this is the first time i've seen those in an english blog...
Are you from Germany or do you have your Browser set to German? The first time I visited the site I got redirected to https://blog.lastpass.com/de/2015/06/lastpass-security-notic... (notice the "de" in the domain), which has the German words. The second time I visited the site I didn't get redirected to the German site and didn't see the English words. Maybe some weird automatic translation bug.
And yes, i've seen the same behavior - getting redirected on first visit and not on the second, so i guess you're right regarding a weird auto-translation bug...