LogMeIn acquires Lastpass • Hacker News Board

Re: LogMeIn acquires Lastpass

#161

Post by ntpeters » Fri, Oct 09, 2015, 3:23 PM UTC

colinplamondon wrote: post #8

This really rubs me the wrong way. Do not like the idea of my password manager bouncing around owners. Or infrastructure changes that new owners often push on the acquired company. If there's one business I REALLY do not want to be moving about, and I want as little churn as possible for, it's a password manager. The thing I liked about LastPass was that it seemed like the highly geeky, less startupy approach to pass…

Dashlane looks really promising. Does anyone here have experience with it? Does it work as smoothly everywhere as LastPass did?

Re: LogMeIn acquires Lastpass

#162

Post by scrollaway » Fri, Oct 09, 2015, 3:23 PM UTC

john_b wrote: post #154

quaunaut wrote: post #101

Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically. * They still don't have access to my raw passwords. Everything's already encrypted before it gets to them, and they don't have the key. They just store the encrypted data. * They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I…

> "They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things." I've never really understood the appeal of account-based password managers. It was a startup and it needed a business model, sure, so from the company's perspectiv…

Agreed. Logically, something like KeepassX (https://www.keepassx.org/) is the most logical, secure choice. I think a lot of people pick Lastpass and such for the convenience of browser integration, but I don't think that's necessarily impossible with keepassx - just so happens that nobody is really working on it (which is a shame).

Re: LogMeIn acquires Lastpass

#163

Post by paulgb » Fri, Oct 09, 2015, 3:24 PM UTC

jscheel wrote: post #65

I had to find out about this from HN. Never got an email, even being a premium member.

Yeah, I can understand the press release being first because LogMeIn is publically traded, but the delay is weird. I just got an email from LastPass now (as a premium member).

Re: LogMeIn acquires Lastpass

#164

Post by lectrick » Fri, Oct 09, 2015, 3:27 PM UTC

Whew, I was on the fence between this and 1Password after Mitro shut down, just a couple days ago... Glad I went with 1Password LOL

Re: LogMeIn acquires Lastpass

#165

Post by lectrick » Fri, Oct 09, 2015, 3:27 PM UTC

switch007 wrote: post #96

Any suggestions for alternatives? I need yubikey support, Chrome & Firefox plugins (Linux & OS X) and an Android app.

So you absolutely must use Yubikey for 2factor auth instead of one of the many alternatives?

Re: LogMeIn acquires Lastpass

#166

Post by mistersquid » Fri, Oct 09, 2015, 3:29 PM UTC

scrollaway wrote: post #162

john_b wrote: post #154

Earlier quoted context omitted.

> "They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things." I've never really understood the appeal of account-based password managers. It was a startup and it needed a business model, sure, so from the company's perspectiv…

Agreed. Logically, something like KeepassX ( https://www.keepassx.org/ ) is the most logical, secure choice. I think a lot of people pick Lastpass and such for the convenience of browser integration, but I don't think that's necessarily impossible with keepassx - just so happens that nobody is really working on it (which is a shame).

Another reason to use LastPass is if you need to share sensitive data with a team.

Group credentials and secure keys for production environments, among other things, can be shared using LastPass.

Re: LogMeIn acquires Lastpass

#167

Post by akshatpradhan » Fri, Oct 09, 2015, 3:31 PM UTC

colinbartlett wrote: post #90

I'd really love for some objective person to weigh in about why all the negative reaction to this. Is LogMeIn a terrible company? I have not used either LogMeIn or LastPass.

I'm curious as well.

Re: LogMeIn acquires Lastpass

#168

Post by reaperhulk » Fri, Oct 09, 2015, 3:33 PM UTC

npongratz wrote: post #156

microtonal wrote: post #132

Earlier quoted context omitted.

I think there is an important difference between LastPass and 1Password: 1Password stores data in a folder you point it to. It is never in any form transferred to their servers.

Are there open source "clients" that can access the 1Password data I store locally?

The file formats are extremely well documented https://support.1password.com/opvault-design/ and many 3rd party tools exist for reading the data.

Re: LogMeIn acquires Lastpass

#169

Post by mrsaint » Fri, Oct 09, 2015, 3:33 PM UTC

npongratz wrote: post #156

microtonal wrote: post #132

Earlier quoted context omitted.

I think there is an important difference between LastPass and 1Password: 1Password stores data in a folder you point it to. It is never in any form transferred to their servers.

Are there open source "clients" that can access the 1Password data I store locally?

Yes, there are. The storage format is "open", and afaik, the current revision is v5. See on GitHub: https://github.com/search?utf8=&q=1password

Re: LogMeIn acquires Lastpass

#170

Post by xbryanx » Fri, Oct 09, 2015, 3:34 PM UTC

Adaptive wrote: post #135

FWIW, regarding the ongoing complaints about the LP UI, they just released a beta update to their chrome extension a couple days ago. Still a ways to go, but they are/have been clearly working on the end user experience. https://chrome.google.com/webstore/detail/lastpass-prebuild-...

Oh wow. Thanks for posting this. It's such an improvement.