3 ms·
So the threat is that if someone hacks Dropbox and gains accesss to your Dropbox they can read which sites you visit? Wouldn't this be "self fixing" problem, i
by 746F7475 11y ago
So the threat is that if someone hacks Dropbox and gains accesss to your Dropbox they can read which sites you visit?
Wouldn't this be "self fixing" problem, if you use 1Password to comeup with a secure Dropbox password?
Obviously this isn't ideal situation, but I see no reason to switch away from 1Password and currently I don't even know where I would go from 1Password. I jumped from LastPass to 1Password since I want to have access to my passwords on mobile devices without paying a yearly fee and now that LastPass has been acquired by LogMeIn I'm in no hurry to jump back. And I don't know if opensource managers like KeepPass have mobile support.
- hackerboos 11y agoYou can also use 2-factor authentication with dropbox.
- tracker1 11y agoI think that the issue is some people don't consider Dropbox a good option to store much of anything unencrypted for sharing... This comes down to Dropbox being a U.S. company, subject to DOJ requests and gag orders, and complying with them, iirc. I'm a little less concerned... though, I use LastPass, I used to use KeePass on dropbox, but lastpass has better integration into the browsers on the platforms I use (less good on android with chrome though, and there's the fee). I don't know that there's a better option that's as seamless for users.
- 746F7475 11y agoWell 1Password is a good solution, expect this meta leaking and I guess U.S. gov can hoover up all that data and see where you are logging in, but I don't know, you just have to weight the options. Actually now that I'm employed and not a student I could easily afford LastPass' yearly fee for mobile, but the LogMeIn buying them thing is a big no-no for me for now. I have to check back in few months or a year and see if LastPass is still usable. Or maybe I'll just try my hand at writing myself a custom solution
- tracker1 11y agoI honestly would love to see something resembling "self-hosted" that used dropbox/onedrive/whatever as a common location for the storage, based on keepass. If it weren't for my desire to not be locked into a browser, I'd honestly just use chrome's synchronized passwords.
- andlier 11y agoThere is Minikeepass, supports keepass files on iOS. (http://minikeepass.github.io/ http://minikeepass.github.io/)
- aleph4 11y agoSounds like some people are self-hosting their 1PasswordAnywhere files, and thus are easily indexable.
- kobayashi 11y agoPeople host their AgileKeychain file publicly facing on the Internet?
- 746F7475 11y agoBut isn't that users fucking up? Again not saying that 1Password shouldn't encrypt the file just that they are not exposing your files to the public. This is like people uploading their private RSA keys to Github
- FooBarWidget 11y agoAnother problem is that Dropbox can see which sites you are visiting.