3 ms·

I’ve always felt like there’s a startup in there that can reliably change all your passwords for you. Probably something like one time $299, which sounds expens

I’ve always felt like there’s a startup in there that can reliably change all your passwords for you. Probably something like one time $299, which sounds expensive, until you realize the pain of doing this.

selykg 4y ago
Ironically... isn't that something LastPass does for you? https://www.pcworld.com/article/430756/nifty-new-lastpass-dashlane-features-can-change-your-passwords-for-you.html https://www.pcworld.com/article/430756/nifty-new-lastpass-da... This is an old article, no idea if the feature still exists or not.
- ipaddr 4y ago
  More like does to you and forces you to do it yourself
artificial 4y ago
Vault rotation++. I was bitten by this switching authenticators when one didn't have an export at the time. It was such a massive pain to login and remove, add, setup and annotate, store secrets and repeat.
ryandrake 4y ago
Depending on how it was implemented, that could just increase the attack surface. Assuming it's a cloud service, now we have another company that has all your passwords, that can be breached. A better way would be desktop software that runs on your local machine and logs in to each web site by itself and changes all your passwords, without using any remote compute or storage, outputting a local file with all your new passwords (don't make the same mistake again using a cloud password manager).
- azinman2 4y ago
  I imagined this was local. I think it would be very difficult to trust it otherwise.
- sorokod 4y ago
  Attack surface will increase regardless of implementation. It is another point that can be attacked, one that did not exist before.
deadfece 4y ago
I love web scraping, maybe I can update this prior idea. With the high proliferation of botting, a lot of sites are now resistant to this type of scripting, but at this low volume of interaction, it may be doable with some effort like Undetected Chromedriver. https://drewdevault.com/2017/05/11/Rotating-passwords.html https://drewdevault.com/2017/05/11/Rotating-passwords.html https://github.com/tsudoko/pass-rotate https://github.com/tsudoko/pass-rotate

selykg 4y ago

Ironically... isn't that something LastPass does for you? https://www.pcworld.com/article/430756/nifty-new-lastpass-dashlane-features-can-change-your-passwords-for-you.html https://www.pcworld.com/article/430756/nifty-new-lastpass-da... This is an old article, no idea if the feature still exists or not.

ipaddr 4y ago
More like does to you and forces you to do it yourself

artificial 4y ago

Vault rotation++. I was bitten by this switching authenticators when one didn't have an export at the time. It was such a massive pain to login and remove, add, setup and annotate, store secrets and repeat.

ryandrake 4y ago

Depending on how it was implemented, that could just increase the attack surface. Assuming it's a cloud service, now we have another company that has all your passwords, that can be breached. A better way would be desktop software that runs on your local machine and logs in to each web site by itself and changes all your passwords, without using any remote compute or storage, outputting a local file with all your new passwords (don't make the same mistake again using a cloud password manager).

azinman2 4y ago
I imagined this was local. I think it would be very difficult to trust it otherwise.
sorokod 4y ago
Attack surface will increase regardless of implementation. It is another point that can be attacked, one that did not exist before.

deadfece 4y ago

I love web scraping, maybe I can update this prior idea. With the high proliferation of botting, a lot of sites are now resistant to this type of scripting, but at this low volume of interaction, it may be doable with some effort like Undetected Chromedriver. https://drewdevault.com/2017/05/11/Rotating-passwords.html https://drewdevault.com/2017/05/11/Rotating-passwords.html https://github.com/tsudoko/pass-rotate https://github.com/tsudoko/pass-rotate