Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Givon Zirkind
keeping something safe in the cloudinherently requires trusting a third party. yeah, that says it all. no access safe. access not safe. cloud computing is good for non critical stuff and stuff you want ppl to see anyway. like your web page. even then, _javascript_ injection jacking your page,

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Tim
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Take a look at http://www.passwordstore.org/ Your GPG key encrypts all of the

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Kevin
On 6/15/2015 6:46 PM, Moti wrote: I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass claims it is. No reason to think otherwise of course, but still. If i read correctly between the lines, some people's

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread John R. Levine
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Seems to me that would limit the cloudy trust problem while still addresssing the very

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread dj
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Seems to me that would limit the cloudy trust problem while still addresssing the

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Harald Hanche-Olsen
John R. Levine wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Nobody has mentioned STRIP yet, but it fits the bill:

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ron Garret
From the department of ironic timing comes this recent posting on Hacker News: https://news.ycombinator.com/item?id=9727297 On Jun 16, 2015, at 9:59 AM, d...@deadhat.com wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server,

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Goldberg
[Disclosure: I work for AgileBits, the makers of 1Password] On 2015-06-16, at 10:53 AM, John R. Levine jo...@iecc.com wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Walton
On Tue, Jun 16, 2015 at 9:24 AM, Givon Zirkind givo...@gmx.com wrote: keeping something safe in the cloud inherently requires trusting a third party. yeah, that says it all. Right. And third parties cannot protect against the threat posed by officers of the court/legal jurisdiction. (Are

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ondrej Mikle
On 06/16/2015 06:20 PM, Tim wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Take a look at