3 ms·

> would you place your security in the hands of some 3rd-party providers such as password managers? I don't know if I can think of a better solution than an op

by n4r9 8y ago

> would you place your security in the hands of some 3rd-party providers such as password managers? I don't know if I can think of a better solution than an open-source password manager which encrypts and stores everything locally. Unless you have an incredible memory. > but honestly these companies have much bigger internal problems than reconsidering their whole stance on usefulness of password managers I guess Troy is just focusing on what he knows best.

auslander 8y ago
> I don't know if I can think of a better solution than an open-source password manager Sure, KeePass(XC) > I guess Troy is just focusing on what he knows best No, KeePass(XC), as you said, stores everything locally, no Troy needed.
- n4r9 8y ago
  Not sure if you're agreeing with me or not. Yes, I think KeePass is the best way and I use it myself with SyncThing to sync between machines. That's still trusting a third party to some degree: you're trusting that the code doesn't have many bugs that someone could exploit to bypass the master password. But it minimises the risk. The part about Troy was in response to the OP's claim about public shaming.
  - auslander 8y ago
    > Not sure if you're agreeing with me or not. Yes, I think KeePass is the best way I do agree about KeePass. Its code survived in the open for that long. About "Troy is just focusing on what he knows best" - security is hard, be precise :)