Conversation

Notices

1. Embed this notice
   SoyDelBierzo :verified_paw: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:32 JST SoyDelBierzo :verified_paw:

   Reading Lastpass data leakage, I noticed this:

   "The threat actor was also able to copy a backup of customer vault data from the encrypted storage container, which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs"

   If you're a Lastpass user, attackers now have your personal data, and the websites where you have an account.

   Expect targeted phishing campaings.

   https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

   • Embed this notice
     aab (aab@khp.ignorelist.com)'s status on Friday, 23-Dec-2022 19:00:21 JST aab

     in reply to
     @louzao Interesting! I use KeePassXC, and the database is stored in my own Nextcloud, so sync between devices (2 computers) is done automatically.
     I've heard really good things about Bitwarden, would you tell me in what ways it is better for you?
   • Embed this notice
     SoyDelBierzo :verified_paw: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:22 JST SoyDelBierzo :verified_paw:

     in reply to

     • Bitwarden
     • ratatop

     @glaber @bitwarden I used it time ago, finally move to local Bitwarden instance only accesible from my network

   • Embed this notice
     ratatop (glaber@mastodon.green)'s status on Friday, 23-Dec-2022 19:00:30 JST ratatop

     in reply to

     • Bitwarden

     @louzao @bitwarden KeePassXC might also be worth a look! It's essentially as good as Bitwarden but offline, so a different use-case

   • Embed this notice
     SoyDelBierzo :verified_paw: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:31 JST SoyDelBierzo :verified_paw:

     in reply to

     • Bitwarden

     Time to migrate to @bitwarden

     It's opensource, encrypts everything, you can run your own server, free for personal use, $10 yearly Premium account...

     https://bitwarden.com/

   • Embed this notice
     aab (aab@khp.ignorelist.com)'s status on Friday, 23-Dec-2022 19:27:44 JST aab

     in reply to
     @louzao Gracias!
   • Embed this notice
     SoyDelBierzo :verified_paw: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:27:47 JST SoyDelBierzo :verified_paw:

     in reply to

     • aab

     @aab I use it to store files like ED25519 private keys, TOTP passwords and secure sharing passwords, or files with my partner.

     I have a local instance running inside a LXC container on a Proxmox server, with daily backups stored on a Cryptomator container in a public cloud.

     Client app uses local copy of data in mobile/tablet, only needs server access to add new sites.