News for hackers. Stuff that matters.
Re:LogMeIn acquires Lastpass by coldpie on Friday October 09, 2015 @09:05AM (#10359706)
I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained?

For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.

Re:LogMeIn acquires Lastpass by skrowl on Friday October 09, 2015 @10:35AM (#10360249)
You should be using VeraCrypt (https://veracrypt.codeplex.com/) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.
Re:LogMeIn acquires Lastpass by coldpie on Friday October 09, 2015 @10:39AM (#10360278)
Yeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.
Re:LogMeIn acquires Lastpass by discreditable on Friday October 09, 2015 @12:16PM (#10361081)
You can use Linux's own cryptsetup to mount TrueCrypt volumes. No TrueCrypt needed. There's documentation on the ArchWiki. https://wiki.archlinux.org/index.php/TrueCrypt
Re:LogMeIn acquires Lastpass by coldpie on Friday October 09, 2015 @01:26PM (#10361743)
Cool, thanks!
Re:LogMeIn acquires Lastpass by baldfat on Friday October 09, 2015 @01:39PM (#10361873)
Re:LogMeIn acquires Lastpass by coldpie on Friday October 09, 2015 @02:43PM (#10362401)
Sure, but at that point, why is maintaining my own package better than just using Truecrypt?
Re:LogMeIn acquires Lastpass by baldfat on Friday October 09, 2015 @09:24AM (#10359791)
Re:LogMeIn acquires Lastpass by coldpie on Friday October 09, 2015 @09:48AM (#10359962)
I don't use Windows and that exploit isn't relevant to my use-case anyway (requires an evil local user). I'll move to another encryption program sometime, but it hasn't been a priority.