4 ms·

Also, wallets are commonly lost and stolen. And houses burn down and are burglarized. Unless you plan on keeping your passwords in a fireproof safe, which isn’

Also, wallets are commonly lost and stolen. And houses burn down and are burglarized. Unless you plan on keeping your passwords in a fireproof safe, which isn’t exactly convenient—especially in our modern mobile world. In 2010, when this article was written, far fewer people did this much computing from a smartphone.

moron4hire 3y ago
Times in the last 40 years that... My wallet has been stolen: 0 My house has burned down: 0 LastPass has been breached: 2+ LastPass' browser extension has caused me headaches: 9000+
- predictabl3 3y ago
  This is like posting to HN that GoDaddy screwed you. It's nothing but a self tattle anymore. The number of times gpg has failed to decrypt one of my "pass" entries: 0.
  - moron4hire 3y ago
    Yeah, I'm such a loser, right? I didn't choose to use LastPass. It was foisted on me by my employer.
- groby_b 3y ago
  The problem here might be LastPass, not password managers.
- tstrimple 3y ago
  The piece of paper in wallet browser extension is even worse. No auto-fill or auto-update options at all and you've got to take care of your own backups and recovery.
  - zlg_codes 3y ago
    More trustworthy than software that may or may not work, may or may not protect secrets, may or may not go for-profit in the future, etc. Password managers make it so that you are utterly dependent on your password manager or you cannot login to anything. How do you get back online to discuss something if your computer burns in a fire, for example? Backups can alleviate this, but the paper is also a backup. Maybe do the triplicate thing? I've considered using a password manager but there are too many times where I need to login to something from a machine that isn't mine, on a machine that I don't trust with storing secrets, or other circumstance. I simply don't want to be caught with my pants down and unable to login to something because my password manager isn't installed.
    - oskarw85 3y ago
      That's just strawman. I have my pwd database stored in the cloud and synced to all my devices. How do I get back online? I will use one of my other devices. And in an unlikely event that all of those devices get destroyed all at once I will just hit "Forgot password" button.
jrm4 3y ago
Oh come ON. Nowhere NEAR as common, in terms of people affected, as "breaches due to crap companies/software promising safety and not delivering."
clsec 3y ago
My laptop, phone, ISP, banking, medical & KeePass passwords are written on paper in a fireproof safe.. I also keep offline backups of my KeePass database.

moron4hire 3y ago

Times in the last 40 years that... My wallet has been stolen: 0 My house has burned down: 0 LastPass has been breached: 2+ LastPass' browser extension has caused me headaches: 9000+

predictabl3 3y ago
This is like posting to HN that GoDaddy screwed you. It's nothing but a self tattle anymore. The number of times gpg has failed to decrypt one of my "pass" entries: 0.
- moron4hire 3y ago
  Yeah, I'm such a loser, right? I didn't choose to use LastPass. It was foisted on me by my employer.
groby_b 3y ago
The problem here might be LastPass, not password managers.
tstrimple 3y ago
The piece of paper in wallet browser extension is even worse. No auto-fill or auto-update options at all and you've got to take care of your own backups and recovery.
- zlg_codes 3y ago
  More trustworthy than software that may or may not work, may or may not protect secrets, may or may not go for-profit in the future, etc. Password managers make it so that you are utterly dependent on your password manager or you cannot login to anything. How do you get back online to discuss something if your computer burns in a fire, for example? Backups can alleviate this, but the paper is also a backup. Maybe do the triplicate thing? I've considered using a password manager but there are too many times where I need to login to something from a machine that isn't mine, on a machine that I don't trust with storing secrets, or other circumstance. I simply don't want to be caught with my pants down and unable to login to something because my password manager isn't installed.
  - oskarw85 3y ago
    That's just strawman. I have my pwd database stored in the cloud and synced to all my devices. How do I get back online? I will use one of my other devices. And in an unlikely event that all of those devices get destroyed all at once I will just hit "Forgot password" button.

jrm4 3y ago

Oh come ON. Nowhere NEAR as common, in terms of people affected, as "breaches due to crap companies/software promising safety and not delivering."

clsec 3y ago

My laptop, phone, ISP, banking, medical & KeePass passwords are written on paper in a fireproof safe.. I also keep offline backups of my KeePass database.