LastPass Login Attempted Activity Blocked – More Information • Hacker News Board

Re: LastPass Login Attempted Activity Blocked – More Information

#11

Post by otachack » Thu, Dec 30, 2021, 4:52 AM UTC

infotropy wrote: post #5

max002 wrote: post #4

Im sorry, but im really missing concept of any cloud/online password manager. I believe this one was hacked some time ago. Obviously the whole thing being online increases attack surface. Im using KeePassX, when i know i will move/use it on other machine i just transfer it via gdrive or whatever and delete that afterwards. So... Unless you change your machines constantly or travel all the time and use different machi…

For me, it’s multiple machines. 2 iPhones, 3 iPads, 3 laptops, a couple of raspberries, and a couple of work machines. I tried to do it with a synced KeePass DB, but getting it to synch properly was nightmarish.

I use Resilio Sync which used to be proprietary and it's been seamless. I do sometimes have to make sure the active device I'm on is synced before accessing the database but most of the time it's fine. I use my phone, laptop, and desktop as devices. With Resilio, there's a nifty option to have an encrypted store for devices you don't trust to read but trust enough to store (think like your parents computer or work computer)

SyncThing may also work for a open source solution, but doesn't have that nifty latter option I stated above, at least not out of the box.

Re: LastPass Login Attempted Activity Blocked – More Information

#12

Post by varjolintu » Thu, Dec 30, 2021, 5:07 AM UTC

max002 wrote: post #4

Im sorry, but im really missing concept of any cloud/online password manager. I believe this one was hacked some time ago. Obviously the whole thing being online increases attack surface. Im using KeePassX, when i know i will move/use it on other machine i just transfer it via gdrive or whatever and delete that afterwards. So... Unless you change your machines constantly or travel all the time and use different machi…

Please don't use KeePassX. The development stopped already in 2016. Switch to a more active alternative. See: https://www.keepassx.org/index.html%3Fp=636.html

Re: LastPass Login Attempted Activity Blocked – More Information

#13

Post by notemaker » Thu, Dec 30, 2021, 1:01 PM UTC

Fwiw I also received this email, even though I deleted my account (faced with the now infamous error message "something went wrong: A").

I did not receive a confirmation that my account was deleted, the only evidence of that is that I can't log in anymore.

Re: LastPass Login Attempted Activity Blocked – More Information

#14

Post by max002 » Thu, Dec 30, 2021, 5:17 PM UTC

varjolintu wrote: post #12

max002 wrote: post #4

Im sorry, but im really missing concept of any cloud/online password manager. I believe this one was hacked some time ago. Obviously the whole thing being online increases attack surface. Im using KeePassX, when i know i will move/use it on other machine i just transfer it via gdrive or whatever and delete that afterwards. So... Unless you change your machines constantly or travel all the time and use different machi…

Please don't use KeePassX. The development stopped already in 2016. Switch to a more active alternative. See: https://www.keepassx.org/index.html%3Fp=636.html

Thank you very much for bringing me up to speed. And as well to others who provided me with their responses, i kind of get it if you have many machines and even though i'd still try to find best way to sync i understand and appreciate your point of view. I will do read up on links on vaults provided and everything else. Thank you again.