Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Givon Zirkind
, blah, blah. if the cloud is not good for HIPAA, banks, financial institutions, that should be a clue. Sent:Monday, June 15, 2015 at 6:46 PM From:Moti m...@cyberia.org.il To:cryptography@randombit.net Subject:[cryptography] LastPass have been hacked, so it seems. I always had my doubts

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Tim
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Take a look at http://www.passwordstore.org/ Your GPG key encrypts all of the

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Kevin
On 6/15/2015 6:46 PM, Moti wrote: I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass claims it is. No reason to think otherwise of course, but still. If i read correctly between the lines, some people's

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread John R. Levine
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Seems to me that would limit the cloudy trust problem while still addresssing the very

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread dj
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Seems to me that would limit the cloudy trust problem while still addresssing the

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Harald Hanche-Olsen
John R. Levine wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Nobody has mentioned STRIP yet, but it fits the bill:

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ron Garret
From the department of ironic timing comes this recent posting on Hacker News: https://news.ycombinator.com/item?id=9727297 On Jun 16, 2015, at 9:59 AM, d...@deadhat.com wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server,

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Goldberg
[Disclosure: I work for AgileBits, the makers of 1Password] On 2015-06-16, at 10:53 AM, John R. Levine jo...@iecc.com wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Walton
: Monday, June 15, 2015 at 6:46 PM From: Moti m...@cyberia.org.il To: cryptography@randombit.net Subject: [cryptography] LastPass have been hacked, so it seems. I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ondrej Mikle
On 06/16/2015 06:20 PM, Tim wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Take a look at

[cryptography] LastPass have been hacked, so it seems.

2015-06-15 Thread Moti
I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass claims it is. No reason to think otherwise of course, but still. If i read correctly between the lines, some people's (sensitive) data maybe on the wrong hands. I