News for hackers. Stuff that matters.
Re:LastPass: Notice of Recent Security Incident by drexlspivey on Thursday December 22, 2022 @04:15PM (#34098798)
What if you want to log in from your phone?
Re:LastPass: Notice of Recent Security Incident by SoftTalker on Thursday December 22, 2022 @04:17PM (#34098821)
I don't do that.

I have a gmail account tied to my phone (Android) and I've logged into that once and it just stays logged in. I don't use that account for anything else.

I don't really do anything else on my phone that requires a login.

Re:LastPass: Notice of Recent Security Incident by dimgl on Thursday December 22, 2022 @04:21PM (#34098888)
> I don't do that.

So your solution is unreasonable for 95% of consumers. Nice.

Re:LastPass: Notice of Recent Security Incident by dspillett on Thursday December 22, 2022 @05:23PM (#34099676)
But likely 100% of the 1 user they were trying to support.

And given the varied needs of people, a suggestion that is reasonable to 5% of them is not bad going. And even 0.001% of them is infinity more than all the alternatives you've suggested in this thread thus far :-)

Re:LastPass: Notice of Recent Security Incident by _Algernon_ on Thursday December 22, 2022 @05:43PM (#34099912)
Considering they answered a question, and weren't trying to provide a solution to 100% of consumers I don't see how its a problem warranting your response.
Re:LastPass: Notice of Recent Security Incident by larrybud on Thursday December 22, 2022 @04:44PM (#34099186)
I’m not sure if you’re trolling or not, but let’s play this out. You really don’t use your phone for any of the following? (Web or app)

Online banking

Online shopping

Social media

Airlines, hotels, or other Tavel bookings

Online news sources requiring accounts Eg hacker news, NYT, etc

Medical / pharmacy

Re:LastPass: Notice of Recent Security Incident by officeplant on Thursday December 22, 2022 @04:52PM (#34099301)
As someone who finally moved to a bank that actually has web access/ phone app in 2020, its perfectly possible to live without using your phone for anything on that list. Hell I didn't start using my phone for medical/banking/travel stuff until 2020 and onward.

It's inconvenient, but possible. I'm in my 30's and I just largely avoided needing any of that because I live in a rural area and don't travel much. Of course I don't miss my old local bank at all.

Re:LastPass: Notice of Recent Security Incident by SoftTalker on Thursday December 22, 2022 @04:48PM (#34099249)
Correct. I do all of those things, but on my computer. Aside from not really trusting my phone, I find having a full sized screen and a real keyboard makes things immensely easier.

I use my phone mainly for text/SMS, and navigation/maps while driving, maybe watching YouTube if I need to kill some time. I don't really do social media at all.

Re:LastPass: Notice of Recent Security Incident by falsenapkin on Thursday December 22, 2022 @06:14PM (#34100235)
Not OP but an interesting discussion to me as I also do not sign into much on my phone. To your specific points, and with the context that I have a working laptop and am home at some point every day:

Online banking - Discover has functional FaceID but every other bank/card app would reset my login on a regular basis and without MFA I don't trust short passwords. So the passwords are a pain to type and I only login to pay off cards once a month... I do it from my computer

Online shopping - Mobile UIs for this space suck, I'm never in a rush to buy anything, and I prefer uBlock Origin being active, so I use my computer.

Social media - Again prefer to have various add ons and a desktop experience, really just don't need this in my life more than a laptop at home allows.

Airlines, hotels, or other Tavel bookings - in my experience I've been able to get tickets into my digital wallet from emails and otherwise these apps are whatever. I traveled for 2 years and had various apps I barely used on my work phone, never bothered with personal phone.

Online news sources requiring accounts Eg hacker news, NYT, etc - just don't need in my pocket. I'll quick scroll certain places if it's been a while or I'm exceptionally bored but there's no need to be signed in.

Medical / pharmacy - I have my card in my wallet and calling for robot help is sufficient outside of that. Something in this space and others is if the call robot can't help then generally neither can the app/website and the best bet is a human which generally requires putting in the time with the robot first anyway.

Re:LastPass: Notice of Recent Security Incident by civopsec on Thursday December 22, 2022 @06:57PM (#34100632)
(Not OP) Very little overall. I do most things on my laptop. I’m not logged in on this site since I don’t comment via my phone.

I don’t do online banking on my phone. I use a payment app which requires a pin.

I hate doing tasks on some touch screen.

Re:LastPass: Notice of Recent Security Incident by jart on Thursday December 22, 2022 @09:22PM (#34101654)
I don't log into anything from my phone. Why would you? How is that unusual? It was within living memory that phones were only used to make phone calls. These days they're most useful for 2FA which is my only use case for having one. But hopefully if more services start supporting products like Yubikey, I'll be able to ditch the phone altogether.
Re:LastPass: Notice of Recent Security Incident by eks391 on Friday December 23, 2022 @03:32AM (#34103542)
> if more services start supporting products like Yubikey, I'll be able to ditch the phone altogether.

It is my dream to ditch the phone. I would replace it with a yubikey in a heartbeat

Re:LastPass: Notice of Recent Security Incident by flippinburgers on Thursday December 22, 2022 @10:34PM (#34102083)
I too do not do these things on my "smart" phone.
Re:LastPass: Notice of Recent Security Incident by autoexec on Friday December 23, 2022 @07:29AM (#34105075)
I don't either.
Re:LastPass: Notice of Recent Security Incident by jozvolskyef on Thursday December 22, 2022 @05:59PM (#34100085)
That's the exact setup I use on my main phone. There's also https://github.com/android-password-store/Android-Password-S..., which I use on throwaway phones.
Re:LastPass: Notice of Recent Security Incident by Strum355 on Thursday December 22, 2022 @04:23PM (#34098919)
There are android apps specifically for this that can fetch from a git repo and you can input your GPG password, with autofill and all
Re:LastPass: Notice of Recent Security Incident by leonsmith on Thursday December 22, 2022 @05:04PM (#34099453)
https://github.com/mssun/passforios which also uses the safari password manager flow so its pretty seamless
Re:LastPass: Notice of Recent Security Incident by Steltek on Thursday December 22, 2022 @09:20PM (#34101645)
Android app that integrates with OpenKeychain and a Yubikey. The Yubikey works with both NFC and USB. The same Yubikey works for SSH to sync passwords with the git server.
Re:LastPass: Notice of Recent Security Incident by bamboozled on Friday December 23, 2022 @12:25AM (#34102578)
When you're this neckbeard, you don't need a phone...
Re:LastPass: Notice of Recent Security Incident by b0afc375b5 on Friday December 23, 2022 @03:18AM (#34103457)
I also use pass (synced via a git repo) with an android app for my phone and an ios app for my ipad.