News for hackers. Stuff that matters.
Re:Firefox Quantum Lands in Beta, Developer Edition by DiabloD3 on Tuesday September 26, 2017 @11:13AM (#15339356)
Switch to Bitwarden, already has a WebExtension extension. Lastpass is basically dead ever since LogMeIn proved they don't care about security of the vault.
Re:Firefox Quantum Lands in Beta, Developer Edition by bonsai80 on Tuesday September 26, 2017 @11:33AM (#15339548)
Thanks for mentioning Bitwarden. I didn't know about them, but I've had the same concerns about Laspass/Logmein. Yubikey functionality is important to me, which many alternatives don't have, but I see Bitwarden does have that. Their GPL v3 license on all of their software is nice to see too.
Re:Firefox Quantum Lands in Beta, Developer Edition by Fnoord on Tuesday September 26, 2017 @11:54AM (#15339757)
Dead to me ever since they decided to raise the price with 100% for no reason (from consumer PoV) whatsoever. Classic bait & switch.

Is there an easy way to convert your current Lastpass database to Bitwarden?

Re:Firefox Quantum Lands in Beta, Developer Edition by gervase on Tuesday September 26, 2017 @12:21PM (#15340094)
Re:Firefox Quantum Lands in Beta, Developer Edition by Fnoord on Tuesday September 26, 2017 @02:27PM (#15341331)
Thanks, both of you.

Seems 2FA (YubiKey) costs 10 USD/year instead of 24 USD/year which LastPass costs.

I've been looking for a recent feature comparison, the Wikipedia one is rather shallow and incomplete [1] [2].

My (incomplete) take on feature comparison:

Both are relatively cross-platform, widely supported by what I consider status quo platforms (Windows, Linux, Android, macOS, iOS, Chrome, Firefox).

Advantages of Bitwarden are open source and public development, approx half the price (and approx same as Lastpass before purchased by Logmein), and the ability to self-host.

Advantages of Lastpass are different login for accessing to account and decrypting database. This is important because without this, a MITM attack gets access to the master password.

I also found the announcement of Bitwarden, approx 1 year old now, on HN [3]. It includes some feedback about the software. Bitwarden uses AES256-CBC. How secure is AES256-CBC in this case, and what does Lastpass use? Another criticism is usage of Google Analytics. This can be disabled in the application, but I don't feel it serves a purpose for the user. It should never have been included in the first place. I also don't think either software is audited.

[1] https://en.wikipedia.org/wiki/List_of_password_managers

[2] https://en.wikipedia.org/wiki/Comparison_of_password_manager...

[3] https://news.ycombinator.com/item?id=12676979

Re:Firefox Quantum Lands in Beta, Developer Edition by DiabloD3 on Tuesday September 26, 2017 @12:10PM (#15339945)
Bitwarden can import Lastpass-made CSV exports (plus exports from literally everyone).
Re:Firefox Quantum Lands in Beta, Developer Edition by bluejekyll on Tuesday September 26, 2017 @11:15AM (#15339375)
Hmm. Yeah I’ve been wondering about lastpass for a little while now.

Is there a comparison of these tools that you’d recommend?

Re:Firefox Quantum Lands in Beta, Developer Edition by DiabloD3 on Tuesday September 26, 2017 @12:12PM (#15339978)
There is no good comparison website I'm aware of, but Bitwarden ticks every box Lastpass does, and is already working on ticking boxes Lastpass doesn't.
Re:Firefox Quantum Lands in Beta, Developer Edition by eradicatethots on Tuesday September 26, 2017 @01:29PM (#15340790)
Bitwarden doesn’t have support for credit cards/ addresses/ SSNs...
Re:Firefox Quantum Lands in Beta, Developer Edition by colemickens on Tuesday September 26, 2017 @06:24PM (#15343114)
Yes, it does. Source: I just switched hours ago and it imported my CCs from LastPass. You can see the stuff they're working on via their Twitter account too.
Re:Firefox Quantum Lands in Beta, Developer Edition by bluejekyll on Wednesday September 27, 2017 @07:02PM (#15353144)
I just switched... Thanks for the recommendation, it's excellent.