News for hackers. Stuff that matters.
Re:LogMeIn acquires Lastpass by scrollaway on Friday October 09, 2015 @11:23AM (#10360627)
Agreed. Logically, something like KeepassX (https://www.keepassx.org/) is the most logical, secure choice. I think a lot of people pick Lastpass and such for the convenience of browser integration, but I don't think that's necessarily impossible with keepassx - just so happens that nobody is really working on it (which is a shame).
Re:LogMeIn acquires Lastpass by manveru on Friday October 09, 2015 @12:11PM (#10361028)
There's actually rather good browser integration for KeePass now, I just switched a few weeks ago from LastPass.

Check out http://keepass.info/plugins.html (I use PassIFox and ChromeIPass via KeePassHttp)

Re:LogMeIn acquires Lastpass by mistersquid on Friday October 09, 2015 @11:29AM (#10360663)
Another reason to use LastPass is if you need to share sensitive data with a team.

Group credentials and secure keys for production environments, among other things, can be shared using LastPass.

Re:LogMeIn acquires Lastpass by jtheory on Friday October 09, 2015 @06:11PM (#10363553)
This one in particular -- I use KeePass for my personal stuff, still; but at work, there seem to be a ton of logins we need to share.

Never mind sensitive stuff -- we get lots of use out of LastPass for managing the list of test and demo users on our site. We setup sandbox accounts (with various types of users) for potential customers. Each time the main logins to into LastPass, so if they run into problems, anyone on the dev team can help them out (with no other coordination required).

I've not been terribly impressed by LP's usability, honestly; but for quite a while they've seemed to be the only mature product in this space.

I've noticed Dashlane seems to be catching up here; I'm keeping an eye on them.

Re:LogMeIn acquires Lastpass by pinkano on Sunday October 11, 2015 @02:58AM (#10368354)
Dashlane is pretty OK. I'm playing with Sticky Password now.
Re:LogMeIn acquires Lastpass by ultramancool on Friday October 09, 2015 @03:16PM (#10362623)
Beware, KeePass uses a weird custom key derivation function. LastPass uses PBKDF2 with a configurable number of iterations, a pretty widely accepted standard.

Maybe this has changed since I last checked but this and many other things seemed highly questionable on KeePass.

Re:LogMeIn acquires Lastpass by marcofiset on Friday October 09, 2015 @11:48AM (#10360827)
An important thing is that LastPass works on mobile.
Re:LogMeIn acquires Lastpass by sethd on Friday October 09, 2015 @12:03PM (#10360950)
So does KeyPassX, quite well actually, at least on iOS but there are Android apps as well.

iOS (MiniKeyPass): https://itunes.apple.com/us/app/minikeepass-secure-password/...

Source: https://github.com/MiniKeePass/MiniKeePass

Re:LogMeIn acquires Lastpass by e_proxus on Saturday October 10, 2015 @02:14AM (#10364687)
How is trusting you data to several corporate entities better than to just one?
Re:LogMeIn acquires Lastpass by sethd on Sunday October 11, 2015 @01:41PM (#10370173)
Huh? The data is only on my devices and no where else. I transfer the password database to the app via iTunes file sharing.
Re:LogMeIn acquires Lastpass by function_seven on Friday October 09, 2015 @12:51PM (#10361433)
Back when I first signed up for LastPass, the killer feature for me was that it worked on my BlackBerry Curve. The fact that they made versions of LP for damn near every platform is what sold it for me.

I don't have a BlackBerry anymore, though. Now might be the time to jump ship.

Re:LogMeIn acquires Lastpass by Splines on Friday October 09, 2015 @12:01PM (#10360928)
Keepass has apps on Android, I've seen an implementation for WP, I'm not sure about iOS.
Re:LogMeIn acquires Lastpass by Niten on Saturday October 10, 2015 @02:47PM (#10366501)
I wouldn't consider Keepass the most secure choice. One of the most common attacks in practice is phishing, and browser integration discourages carelessly pasting your password into something that looks like your bank's site. The Chrome password manager and LastPass can help there, but Keepass does not.