5 ms·

What Open Source one was a convenient or as feature complete? Serious I love LastPass and I use it for everything BUT my banking. I just install the plugin on a

by baldfat 11y ago

What Open Source one was a convenient or as feature complete? Serious I love LastPass and I use it for everything BUT my banking. I just install the plugin on any device or open the webpage and I am all set with all my passwords.

coldpie 11y ago
I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained? For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.
- baldfat 11y ago
  Truecrypt appears to be compromised. http://www.zdnet.com/article/truecrypt-critical-flaws-revealed-its-time-to-jump-ship/ http://www.zdnet.com/article/truecrypt-critical-flaws-reveal...
  - coldpie 11y ago
    I don't use Windows and that exploit isn't relevant to my use-case anyway (requires an evil local user). I'll move to another encryption program sometime, but it hasn't been a priority.
- skrowl 11y ago
  You should be using VeraCrypt (https://veracrypt.codeplex.com/ https://veracrypt.codeplex.com/) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.
  - coldpie 11y ago
    Yeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.
    - discreditable 11y ago
      You can use Linux's own cryptsetup to mount TrueCrypt volumes. No TrueCrypt needed. There's documentation on the ArchWiki. https://wiki.archlinux.org/index.php/TrueCrypt https://wiki.archlinux.org/index.php/TrueCrypt
      - coldpie 11y ago
        Cool, thanks!
    - baldfat 11y ago
      https://aur.archlinux.org/packages/veracrypt/ https://aur.archlinux.org/packages/veracrypt/
      - coldpie 11y ago
        Sure, but at that point, why is maintaining my own package better than just using Truecrypt?
signal11 11y ago
I used Lastpass for random web passwords (everything except banking/shopping) but moved to 1Password, mainly because they could sync between desktop and mobile without using the cloud.

by baldfat 11y ago

coldpie 11y ago

I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained? For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.

baldfat 11y ago
Truecrypt appears to be compromised. http://www.zdnet.com/article/truecrypt-critical-flaws-revealed-its-time-to-jump-ship/ http://www.zdnet.com/article/truecrypt-critical-flaws-reveal...
- coldpie 11y ago
  I don't use Windows and that exploit isn't relevant to my use-case anyway (requires an evil local user). I'll move to another encryption program sometime, but it hasn't been a priority.
skrowl 11y ago
You should be using VeraCrypt (https://veracrypt.codeplex.com/ https://veracrypt.codeplex.com/) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.
- coldpie 11y ago
  Yeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.
  - discreditable 11y ago
    You can use Linux's own cryptsetup to mount TrueCrypt volumes. No TrueCrypt needed. There's documentation on the ArchWiki. https://wiki.archlinux.org/index.php/TrueCrypt https://wiki.archlinux.org/index.php/TrueCrypt
    - coldpie 11y ago
      Cool, thanks!
  - baldfat 11y ago
    https://aur.archlinux.org/packages/veracrypt/ https://aur.archlinux.org/packages/veracrypt/
    - coldpie 11y ago
      Sure, but at that point, why is maintaining my own package better than just using Truecrypt?

signal11 11y ago

I used Lastpass for random web passwords (everything except banking/shopping) but moved to 1Password, mainly because they could sync between desktop and mobile without using the cloud.