5 ms·
I have a security background and I've found (minor) security bugs in lastpass before and yet I still use it. I use lastpass because it is safer than what I was
by arkem 10y ago
I have a security background and I've found (minor) security bugs in lastpass before and yet I still use it.
I use lastpass because it is safer than what I was doing before using a password manager and most inconvenience I'm willing to put up with for my day to day computing.
I like to think of it as a convenience vs security chart of password schemes and for me lastpass is on the pareto frontier of it and happens to be the most convenient option on that frontier.
- jbg_ 10y agoHow exactly is giving a third party access to your plaintext passwords "on the pareto frontier"? There are numerous options which do not involve doing so, some of which have better convenience than pass, so I'm genuinely curious how distributing your plaintext passwords more widely could possibly be at the frontier of security...
- arkem 10y agoWhich options are more convenient? I'm always looking for something better. What do you mean about distributing passwords in plaintext? Can you be more specific for me? It's not the pareto frontier of security, it's the pareto frontier of security versus convenience. It's not exactly a "thing", it's just a mental model I use for thinking about security trade-offs.
- killbrad 10y agoYour plaintext passwords are never sent to lastpass.
- jbg_ 10y agoIf they are handled by a closed source browser extension distributed by them, how are you so sure?