5 ms·

Currently using KeePassX + Dropbox. What sort of benefits would I get from Mitro?

JohnTHaller 12y ago
Currently, this is the best option. Though I recommend KeePass proper as opposed to X since KeePassX's last stable release was over 4 years ago and they've only pushed out alpha builds since then.
- isaacdl 12y ago
  Unfortunately, if you want to run on Linux, KeePassX is the best choice. KeePass "proper" does work on Linux under Mono, but the UI is pretty buggy (textfields don't render the cursor in the right place, and the UI just looks awful in general). I really do wish there was a better native Linux client - some new features would be nice.
  - snassar 12y ago
    There are several good reasons to use KeePassX over Keepass, even with the current status of Alpha 6 in the KeePassX 2 series. * KeePassX has a consistent UI across Windows, OS X, Linux * It's a small, portable binary. I've had good luck running the Windows and Linux binaries off of USD drives. * Alpha 5 and Alpha 6 have been really stable. I started using Alpha 5 and haven't had a need to look back. I've been recommending KeePassX as the go-to password manager for Windows, OS X, and Linux over Keepass.
  - Rapzid 12y ago
    I use Keepass2 exclusively now(started using it this past year due to needing windows and cloud sync support) and have had no major issues across linux and windows. I guess YMMV, but it's been a great success for me.
SideburnsOfDoom 12y ago
Not keeping sensitive data in Dropbox.
- andrey-p 12y ago
  Even if it's encrypted?
  - SideburnsOfDoom 12y ago
    http://www.theguardian.com/technology/2014/jul/17/edward-snowden-dropbox-privacy-spideroak http://www.theguardian.com/technology/2014/jul/17/edward-sno... https://www.techdirt.com/articles/20130620/15390323549/nsa-has-convinced-fisa-court-that-if-your-data-is-encrypted-you-might-be-terrorist-so-itll-hang-onto-your-data.shtml https://www.techdirt.com/articles/20130620/15390323549/nsa-h...
    - jtheory 12y ago
      The KeePass database is strongly-encrypted before you put it up on Dropbox, so you're not relying on Dropbox's own encryption (I wouldn't either).
      - SideburnsOfDoom 12y ago
        I refer you to the techdirt article linked above. If you upload a KeePass file to dropbox now, you may be vulnerable to a way of cracking keepass files available at some future date.
        BorgHunter 12y ago
        This shouldn't matter here, if you regularly rotate passwords and KeePass itself is regularly updated to fix security vulnerabilities.
        jtheory 12y ago
        Yup; but I'd say you're letting the perfect be the enemy of the pretty damned good. KeePass' encryption is quite solid -- if it starts to show some cracks in the face of quantum computers or whatnot somewhere in the future, I can always upgrade and change my passwords so the old database isn't valuable any more. That'd be a PITA, but I don't expect this to happen -- nor for the govt to come up with a huge vulnerability that no one else sees -- so that's the kind of bet I'm comfortable taking.

Currently, this is the best option. Though I recommend KeePass proper as opposed to X since KeePassX's last stable release was over 4 years ago and they've only pushed out alpha builds since then.

isaacdl 12y ago
Unfortunately, if you want to run on Linux, KeePassX is the best choice. KeePass "proper" does work on Linux under Mono, but the UI is pretty buggy (textfields don't render the cursor in the right place, and the UI just looks awful in general). I really do wish there was a better native Linux client - some new features would be nice.
- snassar 12y ago
  There are several good reasons to use KeePassX over Keepass, even with the current status of Alpha 6 in the KeePassX 2 series. * KeePassX has a consistent UI across Windows, OS X, Linux * It's a small, portable binary. I've had good luck running the Windows and Linux binaries off of USD drives. * Alpha 5 and Alpha 6 have been really stable. I started using Alpha 5 and haven't had a need to look back. I've been recommending KeePassX as the go-to password manager for Windows, OS X, and Linux over Keepass.
- Rapzid 12y ago
  I use Keepass2 exclusively now(started using it this past year due to needing windows and cloud sync support) and have had no major issues across linux and windows. I guess YMMV, but it's been a great success for me.

SideburnsOfDoom 12y ago

Not keeping sensitive data in Dropbox.

andrey-p 12y ago
Even if it's encrypted?
- SideburnsOfDoom 12y ago
  http://www.theguardian.com/technology/2014/jul/17/edward-snowden-dropbox-privacy-spideroak http://www.theguardian.com/technology/2014/jul/17/edward-sno... https://www.techdirt.com/articles/20130620/15390323549/nsa-has-convinced-fisa-court-that-if-your-data-is-encrypted-you-might-be-terrorist-so-itll-hang-onto-your-data.shtml https://www.techdirt.com/articles/20130620/15390323549/nsa-h...
  - jtheory 12y ago
    The KeePass database is strongly-encrypted before you put it up on Dropbox, so you're not relying on Dropbox's own encryption (I wouldn't either).
    - SideburnsOfDoom 12y ago
      I refer you to the techdirt article linked above. If you upload a KeePass file to dropbox now, you may be vulnerable to a way of cracking keepass files available at some future date.
      - BorgHunter 12y ago
        This shouldn't matter here, if you regularly rotate passwords and KeePass itself is regularly updated to fix security vulnerabilities.
      - jtheory 12y ago
        Yup; but I'd say you're letting the perfect be the enemy of the pretty damned good. KeePass' encryption is quite solid -- if it starts to show some cracks in the face of quantum computers or whatnot somewhere in the future, I can always upgrade and change my passwords so the old database isn't valuable any more. That'd be a PITA, but I don't expect this to happen -- nor for the govt to come up with a huge vulnerability that no one else sees -- so that's the kind of bet I'm comfortable taking.