News for hackers. Stuff that matters.
Re:Ask HN: How did my LastPass master password get leaked? by GordonS on Monday December 27, 2021 @03:52PM (#29706652)
Same here, I use KeePass on several Windows machines, and on a couple of Android phones (using KeePass2Android). I use a cheap VPS as a central point for syncing - so I can make changes on any machine, then sync them over SFTP, which merges the changes into the database on the VPS. I can then hit sync on any of the other machines, and it will pull down the latest database over SFTP and merge in the changes.

It sounds a bit complicated reading this back, but in reality it's pretty straightforward.

Re:Ask HN: How did my LastPass master password get leaked? by 4rb1t on Monday December 27, 2021 @06:21PM (#29708193)
why not just use dropbox? and secure dropbox using 2FA?

FWIW, I used to run nextcloud on a ec2 instance. Decided to just use dropbox instead. the webdav support on nextcloud was neat with keepass

Re:Ask HN: How did my LastPass master password get leaked? by 40four on Tuesday December 28, 2021 @01:52PM (#29716661)
My whole point was I like to be in total control my password database, and never have to decide whether to trust a third party provider or not.

Not saying Dropbox or lastpass isn’t trustworthy. Just that it’s a point of failure you can eliminate, if the lack of convenience isn’t a huge deal to you.

Re:Ask HN: How did my LastPass master password get leaked? by 40four on Tuesday December 28, 2021 @04:36PM (#29718546)
I might take that back :) currently trending on the front page, a real article about Lastpass master passwords being compromised. https://news.ycombinator.com/item?id=29716715

So yeah, take Lastpass off the list, I don’t trust them :)

Re:Ask HN: How did my LastPass master password get leaked? by GordonS on Monday December 27, 2021 @07:04PM (#29708524)
I have the VPS for others things anyway, and I don't use Dropbox.