News for hackers. Stuff that matters.
Re:Firefox Quantum Lands in Beta, Developer Edition by gervase on Tuesday September 26, 2017 @12:21PM (#15340094)
Re:Firefox Quantum Lands in Beta, Developer Edition by Fnoord on Tuesday September 26, 2017 @02:27PM (#15341331)
Thanks, both of you.

Seems 2FA (YubiKey) costs 10 USD/year instead of 24 USD/year which LastPass costs.

I've been looking for a recent feature comparison, the Wikipedia one is rather shallow and incomplete [1] [2].

My (incomplete) take on feature comparison:

Both are relatively cross-platform, widely supported by what I consider status quo platforms (Windows, Linux, Android, macOS, iOS, Chrome, Firefox).

Advantages of Bitwarden are open source and public development, approx half the price (and approx same as Lastpass before purchased by Logmein), and the ability to self-host.

Advantages of Lastpass are different login for accessing to account and decrypting database. This is important because without this, a MITM attack gets access to the master password.

I also found the announcement of Bitwarden, approx 1 year old now, on HN [3]. It includes some feedback about the software. Bitwarden uses AES256-CBC. How secure is AES256-CBC in this case, and what does Lastpass use? Another criticism is usage of Google Analytics. This can be disabled in the application, but I don't feel it serves a purpose for the user. It should never have been included in the first place. I also don't think either software is audited.

[1] https://en.wikipedia.org/wiki/List_of_password_managers

[2] https://en.wikipedia.org/wiki/Comparison_of_password_manager...

[3] https://news.ycombinator.com/item?id=12676979