3 ms·
Is your password manager 1Password? https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ https://blog.agilebits.c
by chrisbolt 10y ago
Is your password manager 1Password?
https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...
- danieldk 10y agoEven if your password manager is not compromised, the credentials of so many sites is potentially leaked that you should probably still update a substantial number of passwords. I hope 1Password's Watchtower service will soon give hints.
- deleted 10y ago[deleted]
- AGKyle 10y agoDisclaimer: I work for AgileBits, makers of 1Password. I am combing through site lists trying to find sites that are impacted. However, I am only updating based on sites that have suggested that they be updated. Very few are suggesting password updates right now. But, there are a few that are in Watchtower now. Lists like the one this link to are useful, but they don't actually say if a site was indeed impacted. In the end we may just treat this like Heartbleed and suggest they all get updated but for now, we're trying to only suggest it where necessary. If you're aware of any that have suggested password changes please let me know and I'll get them added immediately :) Kyle AgileBits
- m3Lith 10y agoEven if it is, what does it have do to with all those hundreds of sites?
- pmontra 10y agoNo, it's keepassx on my laptop. I don't trust my passwords to somebody else.
- ComputerGuru 10y agoSo why do you have to change them all?
- pmontra 10y agoMy cleartext passwords could have been dumped into the responses of some other site together with my user names. That's the gist of this incident.
- therealmarv 10y agoI still don't understand why you have to change every password (are not they supposed to be all different in a password manager?). Of course if you are super extra mega careful then change them all...
- paulddraper 10y agopmontra doesn't have to change every password, just every password used by a website using Cloudflare (thus the purpose of the list of affected sites).
- nandhp 10y agoYou might find this script I wrote to be helpful: https://github.com/nandhp/misc-utils/blob/master/keepassx_domains.py https://github.com/nandhp/misc-utils/blob/master/keepassx_do...