News for hackers. Stuff that matters.
Re:Twitter urges users to change passwords after computer 'g... by ealhad on Thursday May 03, 2018 @06:39PM (#16990676)
Time for me to advertise my personal setup again!

I use KeePassXC [1] with Syncthing [2] to synchronize my passwords between machines. No third-party!

[1] : https://keepassxc.org/

[2] : https://syncthing.net/

Re:Twitter urges users to change passwords after computer 'g... by beedogs on Thursday May 03, 2018 @08:08PM (#16991116)
Same thing here. I ditched the online password managers a few years back for a similar setup and it's been just about as good as lastpass was, with the added benefit of being stored locally.
Re:Twitter urges users to change passwords after computer 'g... by lorenzhs on Friday May 04, 2018 @06:48AM (#16993556)
Does anyone have a recommendation for a good keepass client for iOS? Is MiniKeePass still the best option? I've been wanting to switch to KeePassXC + something for iOS for a while but I'm not sure what the best way to go is.
Re:Twitter urges users to change passwords after computer 'g... by ealhad on Friday May 04, 2018 @04:30PM (#16998024)
On KeePassXC’s website [1], they recommend MiniKeePass [2] and KeePass Touch[3]. I don’t own any iOS device, so I have tried neither.

[1] https://keepassxc.org/docs/#faq-platform-mobile

[2] https://itunes.apple.com/us/app/minikeepass/id451661808?mt=8

[3] https://itunes.apple.com/us/app/keepass-touch/id966759076?mt...

Re:Twitter urges users to change passwords after computer 'g... by nl on Friday May 04, 2018 @09:10AM (#16994291)
I use MiniKeePass. Don’t love it, but don’t know a better option.
Re:Twitter urges users to change passwords after computer 'g... by ealhad on Friday May 04, 2018 @04:56PM (#16998258)
As I pointed in my reply, you could also try KeePass Touch.
Re:Twitter urges users to change passwords after computer 'g... by abrichr on Thursday May 03, 2018 @07:45PM (#16991002)
What if you’re on someone else’s machine?
Re:Twitter urges users to change passwords after computer 'g... by yorwba on Thursday May 03, 2018 @08:09PM (#16991120)
The last time I needed a password on a someone else's machine, I just looked it up on my phone and typed it in.
Re:Twitter urges users to change passwords after computer 'g... by TimWolla on Thursday May 03, 2018 @08:00PM (#16991081)
Not GP, but KeePass user: I store my KeePass database on a small thumb drive (SanDisk Cruzer Fit), together with a copy of the KeePass executable. If I absolutely need to decrypt my password database on someone else's machine I can take the "secure" software from the USB and hope for the best. The USB also stores a copy of Truecrypt and a large Truecrypt container with backups of my encrypted private keys (PGP, SSH).
Re:Twitter urges users to change passwords after computer 'g... by anf on Friday May 04, 2018 @02:11AM (#16992544)
Key logger + making a cron job that copies everything off your drive = 5 minutes of work? I hope you trust the folks you use this setup on...
Re:Twitter urges users to change passwords after computer 'g... by alex_duf on Friday May 04, 2018 @06:10AM (#16993409)
Key logger + screen shots and you also get access to a 1 password account

No matter what you do if the computer you are using isn't trustworthy you're losing.

Re:Twitter urges users to change passwords after computer 'g... by anf on Friday May 04, 2018 @09:31PM (#16999773)
Yeah, totally with you — don't trust devices you (or your employer) doesn't own. I'm borderline still where I trust my employer's devices with my personal passwords sometimes, but even that seems a bit iffy.