Re:LogMeIn acquires Lastpass
by baldfat on Friday October 09, 2015 @08:59AM
(#10359684)
What Open Source one was a convenient or as feature complete? Serious I love LastPass and I use it for everything BUT my banking. I just install the plugin on any device or open the webpage and I am all set with all my passwords.
[ Parent
| on HN ]
I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained?
For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.
You should be using VeraCrypt (https://veracrypt.codeplex.com/) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.
Yeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.
Re:LogMeIn acquires Lastpass
by discreditable on Friday October 09, 2015 @12:16PM
(#10361081)
You can use Linux's own cryptsetup to mount TrueCrypt volumes. No TrueCrypt needed. There's documentation on the ArchWiki. https://wiki.archlinux.org/index.php/TrueCrypt
Cool, thanks!
Sure, but at that point, why is maintaining my own package better than just using Truecrypt?
Truecrypt appears to be compromised.
http://www.zdnet.com/article/truecrypt-critical-flaws-reveal...
I don't use Windows and that exploit isn't relevant to my use-case anyway (requires an evil local user). I'll move to another encryption program sometime, but it hasn't been a priority.