News for hackers. Stuff that matters.
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @06:00AM (#18598271)
Check out Keepass! Rather than syncing directly into a Cloud, it allows you to store a database file into any location. It supports MFA (e.g. by combining a password with a secret file, or a Yubikey). And everything is open-source.

I like the model a lot, because it solves the "database ownership" issue, where your Password provider (be it LastPass, 1Password, etc) becomes in itself a weak link.

Re:Quora User Data Compromised by StavrosK on Tuesday December 04, 2018 @07:54AM (#18598946)
I'm a super happy user of KeePass too, and KeePass2Android is the best password management app I've ever used.
Re:Quora User Data Compromised by Cthulhu_ on Tuesday December 04, 2018 @08:36AM (#18599265)
I used to use KeePass but the lack of a proper crossplatform UI eventually broke it for me; KeePassX on linux looked and performed terribly, the Android app was just bad, etc etc etc.

I switched to 1password which - at least at the time - offered a web-based fallback hosted from your own dropbox. Plus at the time you owned the data and were responsible for storing and syncing it. Dropbox support came out of the box but if you want you can use a local file.

Re:Quora User Data Compromised by resonious on Tuesday December 04, 2018 @10:24AM (#18600182)
KeePassXC works great for me on Linux, Windows, Mac, and Android.
Re:Quora User Data Compromised by falcolas on Tuesday December 04, 2018 @09:14AM (#18599535)
Have another look at KeePass. They recently got a native Mac implementation, and I seem to recall seeing a new one for Linux at the time.

On the Mac, KeePass now feels like a better experience than having to pay a subscription for 1password.

Re:Quora User Data Compromised by jsmit on Tuesday December 04, 2018 @04:58PM (#18603965)
Or MacPass for macOS, which was a very slick alternative to the KeePass application at the time.
Re:Quora User Data Compromised by stingraycharles on Tuesday December 04, 2018 @09:06AM (#18599476)
Yeah you're right, I believe it's based on .NET so on Linux you'll have to use Mono. For the plugin ecosystem, that's suboptimal because you'll have to rebuild a lot of plugins from scratch.

I used to be a 1password user, but they were pushing their premium, cloud-based offering a lot and lacked Yubikey support so I switched away.

Re:Quora User Data Compromised by jamescampbell on Tuesday December 04, 2018 @09:46AM (#18599796)
Keepass is great, but it is somewhat slower and more clicks to get passwords into forms as opposed to 1Password or LastPass.
Re:Quora User Data Compromised by cicero on Tuesday December 04, 2018 @02:45PM (#18602987)
I have used Keypass for years. It is not as convenient as some of the alternatives, but I trust it more.