News for hackers. Stuff that matters.
Re:Should you be concerned about LastPass uploading your pas... by vezycash on Friday April 05, 2019 @02:32AM (#19580225)
The user experience declined slightly after lastpass got acquired.

For a year or two, lastpass for Firefox didn't have the copy option for usernames and passwords. I had to edit, show password, then copy.

The autofill problem became pronounced after the acquisition as well probably through no fault of the new owner. Many sites like Google and Microsoft have switched to a multi-step login process where username is entered first and password is entered on a different page

Also a proof of sites abusing autofill & hidden forms to steal passwords probably influenced the current situation.

Re:Should you be concerned about LastPass uploading your pas... by shawnz on Friday April 05, 2019 @03:50AM (#19580587)
Two years ago I submitted a ticket asking them to add the "copy password" option to SSH key type entries. A simple and obvious feature. They said they'd look in to it, then nothing. Meanwhile in that time all I've seen them change has been the animations in the menu.
Re:Should you be concerned about LastPass uploading your pas... by elygre on Friday April 05, 2019 @04:31AM (#19580766)
Fascinating. I submitted the same ticket a month or two ago, with the same initial response.

(Now I just stopped holding my breath. Ah, breathing is good!)

Re:Should you be concerned about LastPass uploading your pas... by akdor1154 on Friday April 05, 2019 @07:10AM (#19581419)
FYI copy password works after installing the binary add-in on Win and Linux at least. Why this is necessary I have no idea however.
Re:Should you be concerned about LastPass uploading your pas... by AuthorizedCust on Friday April 05, 2019 @07:16AM (#19581439)
It was because of changes to Firefox's extension system. That said, communication about this was suboptimal. I would have liked for the UI to inform me of the binary option to get back that functionality.
Re:Should you be concerned about LastPass uploading your pas... by thomasfedb on Friday April 05, 2019 @08:53AM (#19581996)
I moved to 1PasswordX for this feature alone. No binary required.
Re:Should you be concerned about LastPass uploading your pas... by pacifika on Friday April 05, 2019 @07:26AM (#19581482)
I have LastPass with binary component installed and copying passwords doesn't work on Ubuntu 16.04 LTS with LP support confirming the issue without ETA.
Re:Should you be concerned about LastPass uploading your pas... by vezycash on Friday April 05, 2019 @01:50PM (#19585219)
I'm using Firefox on windows, I don't have binary component installed but Copying Password works for ME. Here's something you could try:

Go to a site with saved passwords e.g. http://news.ycombinator.com

Lastpass icon changes to show you have an entry. Click the icon, click "Show matched sites." Hover over the entry and you'll see three buttons: Copy username, Copy Password and More options.

I'm assuming these buttons don't work for you. Right-click instead on the entry and you should see a menu with the following items: Autofill, Copy username, Copy password, Copy URL, Go to URL, Edit, Delete.

Try the copy password entry. Hope it works for you.

Re:Should you be concerned about LastPass uploading your pas... by norswap on Friday April 05, 2019 @09:09PM (#19588508)
LogMeIn is where products I genuinely loved go to die.

Years ago it was Hamachi (the LAN-over-internet software). Then it was LastPass and via it XMarks (itself acquired by LastPass shortly before). XMarks suffered much more grievously than LastPass — I suffered data losses on multiple occasions before finally throwing in the towel.

Re:Should you be concerned about LastPass uploading your pas... by toomanybeersies on Friday April 05, 2019 @05:10AM (#19580916)
Lastpass seems to work fine for me on sites with multi-step login like Google.
Re:Should you be concerned about LastPass uploading your pas... by felixschl on Friday April 05, 2019 @03:23AM (#19580449)
I found my perfect ux with password-store, xmonad, and xmonad-contrib's pass prompt module. It takes a bit of time setting up but it pays for itself. I don't store any passwords in my browser and filling in passwords is super quick with fuzzy completion.
Re:Should you be concerned about LastPass uploading your pas... by keypusher on Friday April 05, 2019 @07:51AM (#19581601)
How do you sync the passwords between devices (including mobile & non-linux) and keep them backed up?
Re:Should you be concerned about LastPass uploading your pas... by zeendo on Friday April 05, 2019 @02:20PM (#19585501)
I use the same setup as the GP.

password-store uses git+gnupg so backing them up is a matter of distributing the git repo. My git repo lives on each of my laptops and I have a 'central' host of it...so it's backed up via distribution.

For getting passwords to my phone I use a homemade Android app + small web app that sends them to my phone encrypted on-demand from my laptop or desktop. There are Android apps for using password-store but you have to put your GnuPG keys on your phone for that and I prefer not to do that.

Re:Should you be concerned about LastPass uploading your pas... by resoluteteeth on Friday April 05, 2019 @09:12AM (#19582149)
Not the op, but it's easy to sync and back up because it uses git. Password store on android also supports this.
Re:Should you be concerned about LastPass uploading your pas... by felixschl on Friday April 05, 2019 @02:22PM (#19585519)
Yup, it's just git. Passwords are files in a git tree so you usually do not run into any conflicts unless you manage to change the same password on both ends, which also should be easy to resolve.
Re:Should you be concerned about LastPass uploading your pas... by laurentl on Saturday April 06, 2019 @08:11AM (#19590373)
How do you manage mobile (iOS in particular)?

UP (uncle post) mentions a home-made Android app to sync... is there a more mainstream option?

Re:Should you be concerned about LastPass uploading your pas... by jonahhorowitz on Friday April 05, 2019 @02:31PM (#19585623)
I'm pretty sure this is fixed in the latest version. I can copy the user/pass directly from the extension menu. It also works fine on Microsoft and Google.
Re:Should you be concerned about LastPass uploading your pas... by nukeop on Friday April 05, 2019 @04:27AM (#19580754)
Just use Bitwarden now. It has everything Lastpass has, used to have, and more. And most importantly, you can run your own server.
Re:Should you be concerned about LastPass uploading your pas... by bananaoomarang on Friday April 05, 2019 @11:48AM (#19583698)
Also switched to Bitwarden the other day and it's far superior. None of the irritating bugs Lastpass extensions/integrations had, works perfectly on Firefox, Android, 'web' etc. In general it feels a lot less clunky and it's Firefox addon for instance has many more quality of life features.
Re:Should you be concerned about LastPass uploading your pas... by bigums on Friday April 05, 2019 @05:38PM (#19587302)
The things that Bitwarden lacks for me is a global hot key to search my vault and the ability to only have the app running my menu bar so I don’t have to see it in my alt-tab options. Haven’t looked into Bitwarden enough to see if there is an API to write an Alfred workflow or something to search the vault.
Re:Should you be concerned about LastPass uploading your pas... by Wowfunhappy on Friday April 05, 2019 @01:37PM (#19585068)
My one issue is that their desktop app takes a long time (several seconds) to open on my Mac, possibly because it uses Electron. And, I wish they had a bookmarklet like LastPass does, for rare situations where I can't use an extension.

But overall, yeah, it has been better than LastPass.