News for hackers. Stuff that matters.
Re:LastPass: Notice of Recent Security Incident by heluser on Thursday December 22, 2022 @03:52PM (#34098505)
Not surprising to see another LastPass incident but I wonder why nowadays anyone would choose LastPass over 1password
Re:LastPass: Notice of Recent Security Incident by CookieCrisp on Thursday December 22, 2022 @03:57PM (#34098573)
I switched to 1password after this breach was first announced, but I find it a lot more annoying to use (and I found Bitwarden even worse). Granted, nowhere near as annoying as the breach. Lastpass got in my way a lot less frequently though.
Re:LastPass: Notice of Recent Security Incident by bryfb on Thursday December 22, 2022 @04:03PM (#34098641)
I certainly wouldn't choose LastPass over 1Password, but given 1Password is deprecating local storage I wouldn't recommend 1Password anymore either.
Re:LastPass: Notice of Recent Security Incident by heluser on Thursday December 22, 2022 @04:10PM (#34098741)
I used to have a local only manager but then, obviously, syncing becomes a problem. And then it becomes a choice between syncing an encrypted blob using your own solution (potentially not very secure) vs using a provider who still treats your data as an encrypted blob with no access to the data and tries to do it securely. I think the provider is still more secure (again assuming the 1password access model not talking about LastPass-like providers) plus much more convenient. So if not 1password what would be a recommendation assuming syncing is required?
Re:LastPass: Notice of Recent Security Incident by twistedpair on Thursday December 22, 2022 @07:18PM (#34100791)
I prefer LastPass' featureset over 1Password, when I've trial them both, but I certainly don't prefer LastPass' opsec.