News for hackers. Stuff that matters.
Re:LastPass: Notice of Recent Security Incident by snug on Thursday December 22, 2022 @03:44PM (#34098401)
I've tried a lot the password safes/vaults, and none of them work nearly as well as Chrome/Googles password manager

You can even use it on iOS, and even use it by default. Even apples Keychain password manager works pretty well if you're all in on apple ecosystem. Only reason I see why you would not use it is if you're not using Chrome or Safari, which is most people.

Yeah, yeah, google evil

Re:LastPass: Notice of Recent Security Incident by mook on Thursday December 22, 2022 @03:49PM (#34098474)
The risk there is more you accidentally make a bad comment on YouTube and Google bans your account, I think. I have no idea if I'd still be able to access my passwords if that happens. At least, personally I feel Google deciding to disallow me from logging in is more likely than Google losing my passwords.
Re:LastPass: Notice of Recent Security Incident by snug on Thursday December 22, 2022 @03:54PM (#34098535)
That is only a risk for syncing, you would still still have your passwords locally saved
Re:LastPass: Notice of Recent Security Incident by jackson1442 on Thursday December 22, 2022 @03:59PM (#34098592)
Is there a local UI to view/export your passwords? The only one I'm aware of is https://passwords.google.com but it's been a long time since I've used a builtin browser password manager.

also- does Google (or other browser devs) release information on how they keep your passwords secure? Is it even E2EE?

Re:LastPass: Notice of Recent Security Incident by joshmn on Thursday December 22, 2022 @04:03PM (#34098645)
> Is there a local UI to view/export your passwords?

chrome://settings/passwords

Re:LastPass: Notice of Recent Security Incident by snug on Thursday December 22, 2022 @07:37PM (#34100933)
Yes, no need to use the web, all done from the browser.

To your second question, I don't know, but thats only a concern if you export your passwords

Re:LastPass: Notice of Recent Security Incident by post-it on Thursday December 22, 2022 @03:59PM (#34098600)
Are you sure? Chrome could very well lock you out.
Re:LastPass: Notice of Recent Security Incident by snug on Thursday December 22, 2022 @07:38PM (#34100936)
Never heard that happen, if you are worried about that, do a daily, weekly, monthly export
Re:LastPass: Notice of Recent Security Incident by ritchiey on Friday December 23, 2022 @01:22AM (#34102831)
I personally know at least one person who had his Google account locked with no explanation.
Re:LastPass: Notice of Recent Security Incident by snug on Friday December 23, 2022 @02:19AM (#34103122)
That's not linked to what's local in your Chrome browser
Re:LastPass: Notice of Recent Security Incident by lxgr on Friday December 23, 2022 @09:07AM (#34105919)
How would I do that securely?
Re:LastPass: Notice of Recent Security Incident by boxed on Thursday December 22, 2022 @04:11PM (#34098744)
Chromes password manager used to be as safe as a text file on your desktop. Have they fixed it?
Re:LastPass: Notice of Recent Security Incident by officeplant on Thursday December 22, 2022 @04:47PM (#34099240)
If someone has access to my desktop I've already been compromised enough to not care.
Re:LastPass: Notice of Recent Security Incident by eastbound on Friday December 23, 2022 @03:10AM (#34103418)
Do you run npm or maven on your machine?
Re:LastPass: Notice of Recent Security Incident by boxed on Saturday December 24, 2022 @04:21PM (#34121186)
That's not really true. Password managers should be, and good ones are, way more safe than that.
Re:LastPass: Notice of Recent Security Incident by snug on Thursday December 22, 2022 @07:39PM (#34100945)
Passwords are encrypted, you need to use your computers password to download them decrypted
Re:LastPass: Notice of Recent Security Incident by leetnewb on Friday December 23, 2022 @04:03AM (#34103735)
I think there are two options in Chrome's password manager. One is to decrypt with the computer's password. The other is to use your Google account authentication for decryption.
Re:LastPass: Notice of Recent Security Incident by NaturalPhallacy on Thursday December 22, 2022 @08:40PM (#34101366)
After years (a decade+?) of holding out on password managers I finally gave bitwarden a shot (based on recommendations here), and was able to import ~900 logins from google chrome.

Their UI in the chrome extension (brave browser actually) for changing/editing logins could use a little work, but overall I'm pretty happy with it. I even bit the bullet and now have passwords I don't actually know involved in everyday life. Irritatingly, uploading a video from GeForce's live capture to youtube - despite logging in with 2fa - caused a security freakout at google and now I was forced to change my gmail password.

But I digress, bitwarden even integrates with iOS's login management as another option to Apple's, though irritatingly not on OS X.