Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored and encrypted locally.

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Dale
Neil Bothwick wrote: On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Willie WY Wong
On Tue, Jan 17, 2012 at 08:41:53AM +, Penguin Lover Neil Bothwick squawked: On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored and encrypted

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 12:06:40 +0100, Willie WY Wong wrote: For users of KeePassX, what are its main benefits? Best I can tell it offers a searchable GUI (is it accesible on the command line?), and There's a command line interface out there, google for kpcli. AES or Twofish encryption of a

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Dale
Neil Bothwick wrote: On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Florian Philipp
Am 17.01.2012 12:14, schrieb Neil Bothwick: On Tue, 17 Jan 2012 12:06:40 +0100, Willie WY Wong wrote: For users of KeePassX, what are its main benefits? Best I can tell it offers a searchable GUI (is it accesible on the command line?), and There's a command line interface out there, google

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Florian Philipp
Am 17.01.2012 12:29, schrieb Dale: Neil Bothwick wrote: On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 05:29:23 -0600, Dale wrote: None of the passwords were lost tho. This time. And maybe not the next time either, or the next time, or the next time. Point is, can you state for a fact that no site will ever be broke into, ever? No, which is why I prefer not to entrust

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-16 9:22 PM, Dale rdalek1...@gmail.com wrote: One reason I ask this. I remember my passwords well. If I go to changing them every time someone gets hacked, I'll never be able to keep up with them again. I use Lastpass to remember them but it could stop working because of a upgrade

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 3:41 AM, Neil Bothwick n...@digimed.co.uk wrote: I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I put it on DropBox, hacking that will only give the encrypted database. And I'll stick with passwordmaker, which doesn't store the passwords

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 6:29 AM, Florian Philipp li...@binarywings.net wrote: Other features: - there is an android app (read-only access for now) As does passwordmaker (pwm) - and an iphone app too... - there is a Windows version (including portable version for memory sticks) Since it is a firefox

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I put it on DropBox, hacking that will only give the encrypted database. And I'll stick with passwordmaker, which doesn't store the passwords at

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 2:02 AM, Florian Philipp li...@binarywings.net wrote: Concerning how I'd handle it: I use app-admin/keepassx with a master password. I'd just change the random amazon password as I've not memorized it. KeePassX looks interesting, and although I dearly love pwm, there are some

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 7:50 AM, Neil Bothwick n...@digimed.co.uk wrote: On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I put it on DropBox, hacking that will only give the encrypted database. And I'll

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 07:52:56 -0500, Tanstaafl wrote: KeePassX looks interesting, and although I dearly love pwm, there are some irritating things about it (cannot sort or easily reorder accounts for example)... but, the deal breaker for me is it apparently doesn't have the option to *not*

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Érico Porto
is there a gal here? Érico V. Porto On Tue, Jan 17, 2012 at 11:00 AM, Tanstaafl tansta...@libertytrek.orgwrote: On 2012-01-17 7:50 AM, Neil Bothwick n...@digimed.co.uk wrote: On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: I'll stick with KeePassX, the password database is stored

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 8:03 AM, Neil Bothwick n...@digimed.co.uk wrote: PWM looks interesting too, especially the auto-completion, however there's no ebuild for the desktop client:( Yeah, but you could always just us the Firefox extension to test it our/play with it. I don't use the Desktop Edition...

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 08:00:07 -0500, Tanstaafl wrote: It comes to the same thing really. whether you store the passwords themselves or the methods and data used to generate them, both systems are as strong as the master password and useless if that is compromised. So stick with whatever

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 08:14:36 -0500, Tanstaafl wrote: PWM looks interesting too, especially the auto-completion, however there's no ebuild for the desktop client:( Yeah, but you could always just us the Firefox extension to test it our/play with it. I don't use the Desktop Edition... I

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Willie WY Wong
On Tue, Jan 17, 2012 at 12:11:14PM +, Penguin Lover Neil Bothwick squawked: I was sceptical when it first arrived, but it's really easy to use and no password needed since the card reader generates it for you. It looks like a small calculator with a card slot, so easy enough to carry around

OT: Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Chris Walters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 1/16/2012 09:22 PM, Dale wrote: Howdy, It was on the news that some company got hacked into that was related to Amazon. They said Amazon users should change their password just as a precaution. I have a questions tho. I use some pretty

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Florian Philipp
Am 17.01.2012 03:22, schrieb Dale: Howdy, It was on the news that some company got hacked into that was related to Amazon. They said Amazon users should change their password just as a precaution. I have a questions tho. I use some pretty good passwords for the things that matter, sites

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Dale
Florian Philipp wrote: Am 17.01.2012 03:22, schrieb Dale: Howdy, It was on the news that some company got hacked into that was related to Amazon. They said Amazon users should change their password just as a precaution. I have a questions tho. I use some pretty good passwords for the things