News for hackers. Stuff that matters.

A comment on LastPass bug leaks credentials from previous site. Parent comment

Re:LastPass bug leaks credentials from previous site by tripzilch on Wednesday September 18, 2019 @06:02AM (#21003719)
> Slightly? Just thinking about the synchronization between machines makes this an understatement in my opinion.

What are you on about? Synchronization is easy, you can use just about any service you like.

The fact that it's not kept on a server by the same commercial party that also sold you the security product, is a feature. And obviously necessary, since KeePass is free and open source.

I see leaking credentials bugs with browser-extension operated online storage commercial password software all the time on HN. Obviously you're paying for shiny, not security.

[ Parent | on HN ]
Re:LastPass bug leaks credentials from previous site by tobib on Wednesday September 18, 2019 @12:17PM (#21006903)
what people keep forgetting is that not everyone is in the situation where they are able to use those services. Using Keepass with cloud sync via Dropbox (or Gcloud, etc) is not possible in a lot of corporate contexts.
[ Parent | on HN ]
Re:LastPass bug leaks credentials from previous site by tripzilch on Thursday September 19, 2019 @09:31AM (#21015958)
But then they should run their own Nextcloud perhaps?
[ Parent | on HN ]