4 ms·
What's wrong with something like Lastpass?
by teach 10y ago
What's wrong with something like Lastpass?
- atemerev 10y agoLastpass is something I have no control of. Leaks can happen (already have: https://blog.lastpass.com/2015/06/lastpass-security-notice.html/ https://blog.lastpass.com/2015/06/lastpass-security-notice.h...). More importantly, DDoS can happen, and I will be out of access to everything.
- blueplanet200 10y agoLastpass stores your password encrypted. If in your threat model you're unwilling to use Lastpass because of the leakability of the master database, you should avoid Lesspass since trying to guess your password on Webstie X given Lastpass database is more/less the same as trying to guess it given you're using Lesspass.
- atemerev 10y agoLike I said before, leakability of master database is not that big concern. DDoS on Lastpass, however, is a very likely scenario, especially in the light of recent high-profile DDoS attacks.
- xpil 10y agoDDoS on LastPass is not a big deal as long as you have at least one device logged on. LastPass database is stored locally and can be used off-line.