News for hackers. Stuff that matters.

A comment on LastPass release fix for DOM manipulation vulnerability. Parent comment

Re:LastPass release fix for DOM manipulation vulnerability by the8472 on Saturday April 01, 2017 @07:59AM (#14011711)
don't use a browser addon. don't use one with cloud features. that takes away a lot of attack surface.
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by Anderkent on Saturday April 01, 2017 @08:46AM (#14011848)
And most of the convenience. I don't need a password manager if all I'm using is a single machine - an encrypted file in my homedir would do. It's the syncing of passwords across all devices that is the most useful.
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by the8472 on Saturday April 01, 2017 @10:52AM (#14012391)
Syncing does not need cloud features built into a password manager.
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by brainfire on Sunday April 02, 2017 @12:04PM (#14017619)
How else would it sync automatically?
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by the8472 on Monday April 03, 2017 @08:33AM (#14022270)
Syncing of the encrypted store file between devices or your home server when they're in the same network.
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by Anderkent on Tuesday April 04, 2017 @07:58AM (#14031598)
What if they're never on the same network? I don't bring my work machine home, or my personal laptop to work, and yet they have to sync passwords somehow.
[ Parent | on HN ]