News for hackers. Stuff that matters.
Re:Quora User Data Compromised by silasdavis on Tuesday December 04, 2018 @12:23AM (#18596540)
LastPass is one of my least liked most used tools. Everything about the implentation feels second rate; slow, unreliable login capture, unreliable form fill, occasional inability to edit records, buried password copy, clunky UI, inappropriate modal nagging in browser and app... Most times I use it I am cursing it.

I tried to switch to pass, and I'm not sure if it was something to do with how I imported but it didn't list my passwords and the browser plugin was clunky and didn't work. Anyone had success with pass/gopass.

Bitwarden seems like a happy Medium, I'd rather not do my password ops. The pricing seems fair (and rather optional). I'll try it, thanks.

Re:Quora User Data Compromised by konschubert on Tuesday December 04, 2018 @05:12PM (#18604061)
LastPass has corporate mismanagement written all over it. It's ridiculous how bad their product is considering how big they were.
Re:Quora User Data Compromised by silasdavis on Wednesday December 05, 2018 @11:46AM (#18609927)
It is puzzling. My feeling is that for quite some time they had a lead on features (cross-platform, browser overlay, secret sharing) - particularly the combination of features whereas competitors always seemed to have a subset. That's what reluctantly kept me with them. The software quality does just seem quite bad though.
Re:Quora User Data Compromised by mrhappyunhappy on Tuesday December 04, 2018 @05:06AM (#18598030)
I have the same disappointing experience with LastPass and have grown tired of it. One of these days I will do something about it!
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @06:00AM (#18598271)
Check out Keepass! Rather than syncing directly into a Cloud, it allows you to store a database file into any location. It supports MFA (e.g. by combining a password with a secret file, or a Yubikey). And everything is open-source.

I like the model a lot, because it solves the "database ownership" issue, where your Password provider (be it LastPass, 1Password, etc) becomes in itself a weak link.

Re:Quora User Data Compromised by StavrosK on Tuesday December 04, 2018 @07:54AM (#18598946)
I'm a super happy user of KeePass too, and KeePass2Android is the best password management app I've ever used.
Re:Quora User Data Compromised by Cthulhu_ on Tuesday December 04, 2018 @08:36AM (#18599265)
I used to use KeePass but the lack of a proper crossplatform UI eventually broke it for me; KeePassX on linux looked and performed terribly, the Android app was just bad, etc etc etc.

I switched to 1password which - at least at the time - offered a web-based fallback hosted from your own dropbox. Plus at the time you owned the data and were responsible for storing and syncing it. Dropbox support came out of the box but if you want you can use a local file.

Re:Quora User Data Compromised by resonious on Tuesday December 04, 2018 @10:24AM (#18600182)
KeePassXC works great for me on Linux, Windows, Mac, and Android.
Re:Quora User Data Compromised by falcolas on Tuesday December 04, 2018 @09:14AM (#18599535)
Have another look at KeePass. They recently got a native Mac implementation, and I seem to recall seeing a new one for Linux at the time.

On the Mac, KeePass now feels like a better experience than having to pay a subscription for 1password.

Re:Quora User Data Compromised by jsmit on Tuesday December 04, 2018 @04:58PM (#18603965)
Or MacPass for macOS, which was a very slick alternative to the KeePass application at the time.
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @09:06AM (#18599476)
Yeah you're right, I believe it's based on .NET so on Linux you'll have to use Mono. For the plugin ecosystem, that's suboptimal because you'll have to rebuild a lot of plugins from scratch.

I used to be a 1password user, but they were pushing their premium, cloud-based offering a lot and lacked Yubikey support so I switched away.

Re:Quora User Data Compromised by jamescampbell on Tuesday December 04, 2018 @09:46AM (#18599796)
Keepass is great, but it is somewhat slower and more clicks to get passwords into forms as opposed to 1Password or LastPass.
Re:Quora User Data Compromised by cicero on Tuesday December 04, 2018 @02:45PM (#18602987)
I have used Keypass for years. It is not as convenient as some of the alternatives, but I trust it more.
Re:Quora User Data Compromised by nvarsj on Tuesday December 04, 2018 @08:32AM (#18599229)
I'm in the same boat. The user experience on it is terrible now.

The worse thing that happens to me is if I generate a password, and then Lastpass doesn't save it! It feels like a 50% shot it will actually save the generated password.

I have nearly 1000 passwords stored in it now, so it's going to be a huge pain to migrate.

Re:Quora User Data Compromised by fredley on Tuesday December 04, 2018 @09:15AM (#18599543)
This is by far the worst. I have LP set up with a shortcut + fingerprint tap on my MBP, which works great until I'm generating a password, which never gets saved. I have to remember to get my vault page open ready to fill in before I generate the password, because if I generate one from the toolbar dropdown I'll never see it again. Ugh.
Re:Quora User Data Compromised by xtracto on Tuesday December 04, 2018 @11:20AM (#18600790)
LastPass Mobile UI seems to be intentionally crippled ( https://vgy.me/9r29bm.jpg ) I assume because they want you to download the app, pushing you to purchase their license.

If you load the same site using "load desktop site" the UI gets fixed.

Re:Quora User Data Compromised by _grep_ on Tuesday December 04, 2018 @11:32AM (#18600920)
The Android app is still very frustrating to use.
Re:Quora User Data Compromised by vernie on Tuesday December 04, 2018 @01:06PM (#18601936)
Access through the apps has been free for a couple of years now.
Re:Quora User Data Compromised by omnimus on Tuesday December 04, 2018 @07:17PM (#18604727)
Bitwarden is best. I hope they will not get bankrupt from free users. Its funny it is cheapes but also works the best out off all managers i tried. Dashlane is good but its so much more expensive. Bitwarden will slowly kill most of the managers if they keep up the great work.
Re:Quora User Data Compromised by gketuma on Wednesday December 05, 2018 @12:42AM (#18605935)
Has anyone tried ButterCup (https://buttercup.pw/). I've been looking at the codebase and it seems really solid.
Re:Quora User Data Compromised by silasdavis on Wednesday December 05, 2018 @11:48AM (#18609949)
I will add this to my password manager binge (because I know how to party). I did find the NPM build a bit frightening though - module 956/1xxx built...

Also that site looks like it should be selling something but I see no money hole - should I be worried?

Re:Quora User Data Compromised by alexeldeib on Wednesday December 05, 2018 @01:01AM (#18606002)
This looks really nice. Wonder if there are any security reviews, I'm tempted to try it.