LastPass autofill exploit

Re:LastPass autofill exploit by imglorp on Wednesday July 27, 2016 @08:06AM (#12172092)

Don't use anything that runs in the DMZ (browser), if you care about your secrets.

I use keepassx, which requires manual search, copy, paste but it can store its vault on a cloud drive, mobile etc. and can have a key file or password.

[ Parent | on HN ]

Re:LastPass autofill exploit by cowkingdeluxe on Wednesday July 27, 2016 @01:08PM (#12174563)

Worth mentioning that one of the major benefits of Keepass is that it is open source. Many of the other providers mentioned here are not.

[ Parent | on HN ]

Re:LastPass autofill exploit by chrisper on Wednesday July 27, 2016 @10:13AM (#12172906)

What do you mean? Autotype is available in KeepassX.

[ Parent | on HN ]

Re:LastPass autofill exploit by riskable on Wednesday July 27, 2016 @10:42AM (#12173164)

Autotype is a bit risky because it assumes you've got the correct window/element focused. All it takes to expose your passwords is for a pop-up (e.g. instant message) to appear at the right moment.

Even if you don't hit the enter key/submit the form it is still possible for that incorrect window/app to grab your keystrokes.

[ Parent | on HN ]

Re:LastPass autofill exploit by foxylion on Wednesday July 27, 2016 @04:35PM (#12176304)

I had this once, "auto typed" a password into a messenger window. So be careful it can happen at any time. Better use Ctrl+C and Ctrl+V.

[ Parent | on HN ]