Conversation

Notices

1. Embed this notice
   DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 02-Dec-2022 00:38:22 JST DarkMahesvara

   “LastPass says unknown attackers breached its cloud storage using information stolen during a previous security incident from August 2022.

   The company added that, once in, the threat actors also managed to access customer data stored in the compromised storage service.”

   https://www.bleepingcomputer.com/news/security/lastpass-says-hackers-accessed-customer-data-in-new-breach/

   They seriously did not reset any and all authentication methods after the last attack :asui_what: just another entry in the long list of security incidents for them and a reminder to never trust online password manager ?

   • Hanako Ikezawa likes this.
   • Embed this notice
     Hanako Ikezawa (ikezawa@pl.starnix.network)'s status on Friday, 02-Dec-2022 00:38:21 JST Hanako Ikezawa

     in reply to
     @DarkMahesvara What about just self-hosting Bitwarden or using KeepassXC if you like keep it local?
   • Embed this notice
     Theory_of_Everything (theorytoe@pl.starnix.network)'s status on Friday, 02-Dec-2022 00:42:17 JST Theory_of_Everything

     in reply to

     • Hanako Ikezawa
     @ikezawa @DarkMahesvara
     
     used both, and they are pretty good
     the only downside with keepassxc is that if you manage passwords across multiple machines its gonna be a bit of a pain.
     
     otherwise selfhosting vaultwarden is super easy. (the container installation is even easier)
     Hanako Ikezawa likes this.
   • Embed this notice
     DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 02-Dec-2022 00:57:04 JST DarkMahesvara

     in reply to

     • Hanako Ikezawa
     @ikezawa imo there is little reason to making passwords available over the internet. just keep a db copy of passwords on your devices or even just a USB ?
     Hanako Ikezawa likes this.
   • Embed this notice
     Hanako Ikezawa (ikezawa@pl.starnix.network)'s status on Friday, 02-Dec-2022 00:57:33 JST Hanako Ikezawa

     in reply to
     @DarkMahesvara In my case I have a lot of hardware so I stick to Bitwarden because it sync with every device.
   • Embed this notice
     DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 02-Dec-2022 01:05:31 JST DarkMahesvara

     in reply to

     • Hanako Ikezawa
     @ikezawa that is less an online but local network password manager which is fine. you could also just have the DB saved on one machine inside the network that you can connect to from other devices
     Hanako Ikezawa likes this.