News for hackers. Stuff that matters.
Re:Quora User Data Compromised by mrhappyunhappy on Tuesday December 04, 2018 @05:06AM (#18598030)
I have the same disappointing experience with LastPass and have grown tired of it. One of these days I will do something about it!
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @06:00AM (#18598271)
Check out Keepass! Rather than syncing directly into a Cloud, it allows you to store a database file into any location. It supports MFA (e.g. by combining a password with a secret file, or a Yubikey). And everything is open-source.

I like the model a lot, because it solves the "database ownership" issue, where your Password provider (be it LastPass, 1Password, etc) becomes in itself a weak link.

Re:Quora User Data Compromised by StavrosK on Tuesday December 04, 2018 @07:54AM (#18598946)
I'm a super happy user of KeePass too, and KeePass2Android is the best password management app I've ever used.
Re:Quora User Data Compromised by Cthulhu_ on Tuesday December 04, 2018 @08:36AM (#18599265)
I used to use KeePass but the lack of a proper crossplatform UI eventually broke it for me; KeePassX on linux looked and performed terribly, the Android app was just bad, etc etc etc.

I switched to 1password which - at least at the time - offered a web-based fallback hosted from your own dropbox. Plus at the time you owned the data and were responsible for storing and syncing it. Dropbox support came out of the box but if you want you can use a local file.

Re:Quora User Data Compromised by resonious on Tuesday December 04, 2018 @10:24AM (#18600182)
KeePassXC works great for me on Linux, Windows, Mac, and Android.
Re:Quora User Data Compromised by falcolas on Tuesday December 04, 2018 @09:14AM (#18599535)
Have another look at KeePass. They recently got a native Mac implementation, and I seem to recall seeing a new one for Linux at the time.

On the Mac, KeePass now feels like a better experience than having to pay a subscription for 1password.

Re:Quora User Data Compromised by jsmit on Tuesday December 04, 2018 @04:58PM (#18603965)
Or MacPass for macOS, which was a very slick alternative to the KeePass application at the time.
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @09:06AM (#18599476)
Yeah you're right, I believe it's based on .NET so on Linux you'll have to use Mono. For the plugin ecosystem, that's suboptimal because you'll have to rebuild a lot of plugins from scratch.

I used to be a 1password user, but they were pushing their premium, cloud-based offering a lot and lacked Yubikey support so I switched away.

Re:Quora User Data Compromised by jamescampbell on Tuesday December 04, 2018 @09:46AM (#18599796)
Keepass is great, but it is somewhat slower and more clicks to get passwords into forms as opposed to 1Password or LastPass.
Re:Quora User Data Compromised by cicero on Tuesday December 04, 2018 @02:45PM (#18602987)
I have used Keypass for years. It is not as convenient as some of the alternatives, but I trust it more.
Re:Quora User Data Compromised by nvarsj on Tuesday December 04, 2018 @08:32AM (#18599229)
I'm in the same boat. The user experience on it is terrible now.

The worse thing that happens to me is if I generate a password, and then Lastpass doesn't save it! It feels like a 50% shot it will actually save the generated password.

I have nearly 1000 passwords stored in it now, so it's going to be a huge pain to migrate.

Re:Quora User Data Compromised by fredley on Tuesday December 04, 2018 @09:15AM (#18599543)
This is by far the worst. I have LP set up with a shortcut + fingerprint tap on my MBP, which works great until I'm generating a password, which never gets saved. I have to remember to get my vault page open ready to fill in before I generate the password, because if I generate one from the toolbar dropdown I'll never see it again. Ugh.
Re:Quora User Data Compromised by xtracto on Tuesday December 04, 2018 @11:20AM (#18600790)
LastPass Mobile UI seems to be intentionally crippled ( https://vgy.me/9r29bm.jpg ) I assume because they want you to download the app, pushing you to purchase their license.

If you load the same site using "load desktop site" the UI gets fixed.

Re:Quora User Data Compromised by _grep_ on Tuesday December 04, 2018 @11:32AM (#18600920)
The Android app is still very frustrating to use.
Re:Quora User Data Compromised by vernie on Tuesday December 04, 2018 @01:06PM (#18601936)
Access through the apps has been free for a couple of years now.