News for hackers. Stuff that matters.
Re:I'm sure LastPass setting the delete account to display: ... by Schnitz on Saturday December 24, 2022 @06:15PM (#34122166)
A local keepass is a great alternative, been doing that for ages and honestly copying my keepass db to a device every once in a while is way less troublesome than quadruple factoring into lastpass/1password or whatever.
Re:I'm sure LastPass setting the delete account to display: ... by scarab92 on Saturday December 24, 2022 @06:26PM (#34122284)
For most people, the keepass db will need to be synced and they’ll also want clients on their computers and phones to access it.

What’s the difference, security wise, to an all in one offering that works the same way under the hood, like 1password cloud or bitwarden?

It seems to me that those syncing keepass databases around are just incurring pain without any real increase in security.

Re:I'm sure LastPass setting the delete account to display: ... by derkades on Saturday December 24, 2022 @06:38PM (#34122378)
Having a different vendor for the frontend software and the cloud storage part does arguably increase security.

Let's say a national security agency wants access to your passwords. They can "easily" make LastPass send a custom version of the client to your browser. This custom version could send your password to LastPass, allowing them to decrypt your database.

To me it seems like it would be harder to ship a malicious KeePass program to a single user. Especially if that user has installed KeePass using their Linux OS package manager.

Re:I'm sure LastPass setting the delete account to display: ... by noisy_boy on Saturday December 24, 2022 @08:27PM (#34123104)
Syncing is basically painless and automatic with Syncthing[0] - you only need to set it up once per device (unless you are adding devices frequently which isn't the typical usecase for personal use).

[0]: https://syncthing.net/