LogMeIn acquires Lastpass • Hacker News Board

Re: LogMeIn acquires Lastpass

#411

Post by mc808 » Sat, Oct 10, 2015, 9:32 AM UTC

pms wrote: post #287

Some time ago LastPass automatically DELETED my five-year old account on Mendeley. The "AutoFill" option of LastPass was turned on. I was browsing my profile settings on Mendeley. Somehow LastPass automatically commenced the account removal action, filled in my password, and confirmed the prompt. My account was gone. I did NOT EVEN NOTICE when it happened. The only reason I know it now is because I managed to reprodu…

Out of curiosity, how did it go with Mendeley? Were they able to recover your account?

Re: LogMeIn acquires Lastpass

#412

Post by m1keil » Sat, Oct 10, 2015, 10:22 AM UTC

colinbartlett wrote: post #90

I'd really love for some objective person to weigh in about why all the negative reaction to this. Is LogMeIn a terrible company? I have not used either LogMeIn or LastPass.

Personally for me, I just can't trust a none security focused enterprise, running a security focused product. I just know that priorities will slowly change from security first to some random not so secure feature.

Additionally, LastPass did good job in disclosure of security incidents in the past. I'm pretty sure this won't happen now that they are tied with this big brand name which thinks that publishing security incidents is bad for its PR.

Bottom line - It's a matter of trust for me, and I don't trust them.

Re: LogMeIn acquires Lastpass

#413

Post by MichaelGG » Sat, Oct 10, 2015, 11:21 AM UTC

746F7475 wrote: post #405

MichaelGG wrote: post #372

Earlier quoted context omitted.

Dropbox runs a binary on your machine; that's enough to suspect them. Stick with an open source password manager and an open sync service (S3 plus a script? Or a third party client like Arq).

Yeah... I'm not in the RMS camp

Nothing to do with software freedom, everything to do with security/auditability.

Re: LogMeIn acquires Lastpass

#414

Post by vertis » Sat, Oct 10, 2015, 12:17 PM UTC

shlant wrote: post #212

microtonal wrote: post #128

Earlier quoted context omitted.

This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior). Did you try 1Password (which works with Dropbox, Wifi sync, etc.)? Not affiliated with them, just a happy customer.

I actually did an evaluation of password storage services recently and chose LastPass over 1Password for a couple reasons: 1. 1Password is SUPER expensive for what it is. You really pay for the fact that it looks nice and integrates well with mac. 2. It has no enterprise level features (This is for my organization) such as user management, access logging and fine grained roles and sharing. 1Password might be good for…

rattic.org is a great open source option for enterprise/team use.

Re: LogMeIn acquires Lastpass

#415

Post by gabrielrotbart » Sat, Oct 10, 2015, 1:06 PM UTC

newman314 wrote: post #388

Eva_Schweber wrote: post #293

Earlier quoted context omitted.

My name is Eva Schweber and I work for AgileBits, the company that makes 1Password. I would just like to clarify that AgileBits never gets access to your data or your Master Password. It is either stored locally on the user's machine or network or in his/her own Dropbox or iCloud account.

Please also consider officially supporting BT Sync. I'm really not keen on Dropbox syncing as there is no need for a copy to exist on the cloud

I've got it working fine with BT Sync. All you need to do is put the .agilechain file in a sharable folder and load it up with 1password on both ends. It syncs up just fine.

Re: LogMeIn acquires Lastpass

#416

Post by perlgeek » Sat, Oct 10, 2015, 2:17 PM UTC

lewisl9029 wrote: post #42

Tinyyy wrote: post #27

Honestly if you're a security / privacy company, can you please just not get acquired? You can't 'transfer' your customers' trust to a third party like you transfer cash.

Agreed. Or just open source it so we won't have to trust you.

As long as it's a hosted service, you still need to trust the one who runs it.

Re: LogMeIn acquires Lastpass

#417

Post by JoeAltmaier » Sat, Oct 10, 2015, 2:37 PM UTC

thieving_magpie wrote: post #367

JoeAltmaier wrote: post #356

Earlier quoted context omitted.

What's your explanation then?

What are you asking me to do? Explain someone else's post to you after they took the time to spell it out specifically for you? I won't be doing that.

Sorry, I meant "Why did he get downvoted then?" I got hit for trying to explain what I thought was a reasonable scenario.

I'll tell you what I think. I was right; he was too negative; and folks feel threatened by that. Fits the data here pretty well.

Re: LogMeIn acquires Lastpass

#418

Post by sundarurfriend » Sat, Oct 10, 2015, 3:18 PM UTC

Splines wrote: post #202

iscrewyou wrote: post #152

I've been using an excel workbook that is stored in an encrypted image as my ways to manage passwords. How are these services that people mention in the comments, better at doing the same? Is there a better way someone has come up with to manage passwords where you don't have to rely on these services?

Local keepass database, synced with $yourpreferredcloudservice. On my Android phone I use a keepass app that includes a keyboard, which integrates typing in username/password. Also supports 2fa totp, which feels to me like poking holes in the whole idea, but if you want to use it it's there.

> Also supports 2fa totp, which feels to me like poking holes in the whole idea

I'm a Keepass user and I didn't know it had support for 2fa. Why do you feel it's poking holes in the idea?

Re: LogMeIn acquires Lastpass

#419

Post by m1keil » Sat, Oct 10, 2015, 4:10 PM UTC

krupan wrote: post #174

Encryptr is an alternative that I've had my eye on: https://encryptr.org/ They don't plan to ever do auto-fill for security reasons, which I'll admit disappoints me.

I was curious about Encryptr as well. I hope the maintainer will change to less purist approach and understand that for most of us, copy/paste of login details is just no-go.

Re: LogMeIn acquires Lastpass

#420

Post by junto » Sat, Oct 10, 2015, 6:15 PM UTC

Eva_Schweber wrote: post #351

junto wrote: post #316

Earlier quoted context omitted.

I'm still on v3. I have the family licence. I'd like to move to v4+ but I don't see a cost effective upgrade route, for windows, ios and android in my case.

Hi junto, My name is Eva Schweber and I work for AgileBits, the folks who make 1Password. For Windows you are eligible for an existing customer discount. Just go to our store at http://agilebits.com/store and click on the Upgrade button under the license you are wanting to purchase. You will be prompted to enter your 1 Password 3 license code and then you will see the discounted prices you are eligible for. We have a…

Does the free Android reader app still work with v4 as well?