3 ms·
We're reminded that cloud services are ultimately someone else's computer. Putting one's secrets someone else's computer under the marketing of convenience is
by j45 4y ago
We're reminded that cloud services are ultimately someone else's computer. Putting one's secrets someone else's computer under the marketing of convenience is just that.
This is not just to do with LastPass. It doesn't make sense why one would put their personal, most valuable passwords in the hand of another party. Of course, it's handy on a team between people.
When it comes to our bank accounts, do we trust someone like that with the pin numbers to our credit and bank cards?
One positive that comes out of this is that it raises awareness of thinking about the difference between security and convenience to manage one's own passwords.
One solution? Locating a zero, or no knowledge file storage system which is encrypted at rest and transit and placing your own files on it is the first start.
Spideroak used to fill that slot nicely (not sure if it's available anymore), and others I have heard about are sync.com and syncthing which do this just fine. Are there any other solutions that would be reasonably teachable to the average user?
- oceanplexian 4y agoI really don't understand the point of these cloud password managers. Use something like KeepassX. Encrypt it with AES256, upload it to Dropbox, Google Drive, whatever. I personally throw the encrypted p/w file in an encrypted MacOS disk image with a secondary, separate memorized passphrase as well. Literally solves the problem without having to trust or pay some random sketchy service.
- Fire-Dragon-DoL 4y agoSharing with family sucks with these. No permission control and no simultaneous write from multiple devices make those unusable
- j45 4y agoWouldn't most of the use cases be reading, instead of writing? I have seen people create multiple files on a share that works fine. I wasn't too keen on it at first but it did seem to work OK.
- Fire-Dragon-DoL 4y agoI create accounts quite often, so I would expect collisions to happen, the cost of mistake is high. The other problem is that there is stuff you want for yourself, stuff shared with your partner, stuff shared with all the family (children included) and stuff shared 1-on-1 with each child. That gets messy quickly.
- j45 4y agoHopefully an upsurge project will eat this problem soon.
- bearmode 4y agoBecause that's unbelievably less convenient.