[cryptography] LastPass have been hacked, so it seems.

2015-06-15 Thread Moti
I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass claims it is. No reason to think otherwise of course, but still. If i read correctly between the lines, some people's (sensitive) data maybe on the wrong hands. I m

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Givon Zirkind
page, blah, blah. if the cloud is not good for HIPAA, banks, financial institutions, that should be a clue.     Sent: Monday, June 15, 2015 at 6:46 PM From: Moti To: cryptography@randombit.net Subject: [cryptography] LastPass have been hacked, so it seems. I always had my doubts about

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Kevin
On 6/15/2015 6:46 PM, Moti wrote: I always had my doubts about keeping my passwords in the cloud. Let's hope for LastPass users that their data is as secure as LastPass claims it is. No reason to think otherwise of course, but still. If i read correctly between the lines, some people's (sensiti

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread John R. Levine
Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Seems to me that would limit the cloudy trust problem while still addresssing the very

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Tim
> Are there any password managers that let the user specify where to > store a remote copy of the passwords (FTP server, scp, Dropbox, > whatever) while keeping the crypto and the master password on the end > devices? Take a look at http://www.passwordstore.org/ Your GPG key encrypts all of the

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread dj
> Are there any password managers that let the user specify where to > store a remote copy of the passwords (FTP server, scp, Dropbox, > whatever) while keeping the crypto and the master password on the end > devices? > > Seems to me that would limit the cloudy trust problem while still > addresssi

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ron Garret
>From the department of ironic timing comes this recent posting on Hacker News: https://news.ycombinator.com/item?id=9727297 On Jun 16, 2015, at 9:59 AM, d...@deadhat.com wrote: >> Are there any password managers that let the user specify where to >> store a remote copy of the passwords (FTP ser

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Goldberg
[Disclosure: I work for AgileBits, the makers of 1Password] On 2015-06-16, at 10:53 AM, John R. Levine wrote: > Are there any password managers that let the user specify where to store a > remote copy of the passwords (FTP server, scp, Dropbox, whatever) while > keeping > the crypto and the mas

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Harald Hanche-Olsen
John R. Levine wrote: Are there any password managers that let the user specify where to store a remote copy of the passwords (FTP server, scp, Dropbox, whatever) while keeping the crypto and the master password on the end devices? Nobody has mentioned STRIP yet, but it fits the bill: https://

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Ondrej Mikle
On 06/16/2015 06:20 PM, Tim wrote: > > >> Are there any password managers that let the user specify where to >> store a remote copy of the passwords (FTP server, scp, Dropbox, >> whatever) while keeping the crypto and the master password on the end >> devices? > > Take a look at http://www.passw

Re: [cryptography] LastPass have been hacked, so it seems.

2015-06-16 Thread Jeffrey Walton
nfer, CVE-2015-1065. Jeff > Sent: Monday, June 15, 2015 at 6:46 PM > From: Moti > To: cryptography@randombit.net > Subject: [cryptography] LastPass have been hacked, so it seems. > I always had my doubts about keeping my passwords in the cloud. > Let's hope for LastPass users that