On Thu, Oct 23, 2014 at 10:58 PM, Dan Covill <[email protected]> wrote:

> I have two accounts that use the 2-step (NOT 2-factor) login.  (One is
> Vanguard.)  Each has two LastPass entries, one for the UserId and one for
> the pw.  Normally, in neither case will LastPass detect the UserId request,
> so I enter it manually.  In both cases, LastPass then autofills the
> password entry (which is on a different page).
>
> Occasionally I will get an autofill on the UserId.  This seems to happen
> when I did NOT go there from my bookmark, but replied to an alert link to
> the login page.
>
> Wish I knew what to put in the bookmark to make LastPass see it, but it's
> reliable enough so I can live with it.
>

I've been using LastPass for a couple of months, and I'm pretty pleased
with it. I have run into a couple of sites with issues, and they can
usually be resolved by deleting that account and trying again, or doing
some Googling and usually ending up on the LastPass tech support site with
a resolution.

Passwords stink as a security measure; they always have. Primitive armies
beat the "who goes there?" challenge out of captured prisoners. That
situation hasn't changed:

http://xkcd.com/538/

After using LastPass to generate difficult-to-hack passwords, I wonder if
we'll go to the next step and add smartcards to our identities. LastPass
has a bundle with YubiKey (https://lastpass.com/yubico/) so you can add a
physical item to the knowledge of your password. A hacker in Omaha may get
your password from a badly-protected website, but they'll not get the
smartcard. The prices on these have gone down spectacularly. Even Google is
getting into the act:

But they still suffer from the fatal flaw of sticking straight out from our
sleek laptops, begging to get snagged as we move the machine around,
wreaking havoc on themselves or far worse, on the machine (a $6 key is
toughened so it doesn't break, and instead cracks the motherboard of the
$1500 laptop to which it is attached, is not good design.) The latest,
Yubikey Neo-N fits into the USB socket, but at a premium cost of $60.

Does anyone have one of these yet? I'd be interested in experiences.

-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/cacw6n4sselw_jgw2wax1ugkz1sqslq7lbxdp0jrg50razba...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to