Live data from Hacker News

LogMeIn acquires Lastpass

blog.lastpass.com

101–110 of 443 posts

Re: LogMeIn acquires Lastpass

#101
Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically.

* They still don't have access to my raw passwords. Everything's already encrypted before it gets to them, and they don't have the key. They just store the encrypted data.

* They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things.

* Then again, LastPass hasn't had the greatest user experience lately. A mixture of simply not doing the data entry on some sites, and having a poorly designed UI for mobile that feels like little more than an extension of the desktop experience(which doesn't work very smoothly on mobile- it needs to be rethought from the ground up) means that perhaps the new things LastPass could do with this funding would make it more usable.

But at its core, this is a security company to me. Probably the only one I pay for directly. I love change and expansion in so many other industries, but I suppose I'm just not used to it here- perhaps that gut response of "I want my security to be utterly solid because of how bad it could be if it goes wrong".

This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior).

Re: LogMeIn acquires Lastpass

#102
post #94

Earlier quoted context omitted.

I use opensource keepass. Sync my password db via dropbox. Totally works for me.

Does it work on mobile?

Yes, i have it running in my BlackBerry! Im pretty sure, iOS and Android alternatives would be available.

Re: LogMeIn acquires Lastpass

#104
As a LastPass Premium customer for longer than they've owned XMarks and a combined product customer since, this concerns me. I'm not planning to change my LastPass usage until/unless they change how the product works, but I'm a bit more leery of steering customers to the Enterprise product now and will be investigating alternatives in that space.

As for XMarks, I'm torn. It has nice potential, but I feel like the company has basically let it stagnate warts and all. Some seemingly-obvious features like tracking changes to saved bookmarks (diffs, not checking the content of the URL) don't exist, and the ways to get archival data out to do it yourself are clunky and manual. What made me start wanting that was a browser going funky and losing a chunk of bookmarks - I had to kind of ballpark when that was, go back, dump a backup, find them in the HTML dump backup file then recreate and I'm not certain I ended up getting them all.

Re: LogMeIn acquires Lastpass

#105
post #98
post #24

Earlier quoted context omitted.

I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained? For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.

You should be using VeraCrypt ( https://veracrypt.codeplex.com/ ) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.

Yeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.

Re: LogMeIn acquires Lastpass

#106

This really rubs me the wrong way. Do not like the idea of my password manager bouncing around owners. Or infrastructure changes that new owners often push on the acquired company. If there's one business I REALLY do not want to be moving about, and I want as little churn as possible for, it's a password manager. The thing I liked about LastPass was that it seemed like the highly geeky, less startupy approach to pass…

I use opensource keepass. Sync my password db via dropbox. Totally works for me.

Are there plugins for safari/firefox/chrome and does it work on ios and have a nice little cli?

I'm basically preparing to bail on lastpass with this news but need to have all my bases covered.

Re: LogMeIn acquires Lastpass

#107
post #82
post #68

Earlier quoted context omitted.

Does it have android fingerprint login/auth like Lastpass? This is my favorite feature and would hate to lose it.

No, it doesn't and it seems that it doesn't have 2 factor authentication or yubikey supper

1Password stores its encrypted data 'offline', so 2FA does not make sense for their product.

Even with LastPass offering 2FA, its just that, authentication, its not used as part of the encryption/decryption process (I did read somewhere it helps with your local cached copy, but it doesn't effect the copy stored on their servers)

If you wanted to use your YubiKey with 1Password, you could set a static password and 'split' your master password (half you remember, the other half is keyed in by the YubiKey)

Re: LogMeIn acquires Lastpass

#108

Congrats to LastPass team for a successful exit :) I understand why the users might have concerns with "LogMeIn", but well one should've expected (at least on this forum) that this is going to happen. I know this isn't the most popular comment. But, what the heck, be happy for the LastPass team, they've worked their ass off. That's what this forum is for, isn't it ? We(hackers) are all in the same boat.

I don't think anybody is unhappy for the LastPass team. Many of us use LastPass though and so we are nervous about the future of something we trust and use. I don't trust LogMeIn like I trusted LastPass and so now I have to contemplate finding a new solution to a problem that I thought was solved.

So hooray to the LastPass team and condolences to the LastPass customers.

Re: LogMeIn acquires Lastpass

#109

Anyone aware of good alternatives? Primarily for enterprise customers who want to share passwords between teams. We have developers, and regular ol' employees who use this of varying levels of computer comfort. We need to be able to share passwords org-wide and team-wide. And on a personal note, I need to be able to manage my own passwords and my partner's and we share from time to time.

I believe Personal has a business plan for sharing passwords and data between teams. I haven't tried it though.

https://www.personal.com/

Post reply on HN