|
With so much amount of cyber infiltration, intrusion attempts, hacking and sabotages reported even on biggies like RSA, I am surprised to witness business models like online password managers. I recently came across a website like http://www.passpack.com/en/home/[^]. How do people get confidence to entrust their entire identity with a lesser known third party?
In my personal view, I am even afraid of store confidential content in Microsoft Office products like Excel and prefer them to be saved in my MySQL and access via my indigenous PHP application through my WAMPS.
Vasudevan Deepak Kumar
Personal Homepage Tech Gossips
The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep!
|
|
|
|
|
Vasudevan Deepak Kumar wrote: How do people get confidence to entrust their entire identity with a lesser known third party?
By using WAMP I guess. Or maybe they don't:
http://keepass.info/[^]
|
|
|
|
|
jim lahey wrote:
Keepass is a desktop-based tool right?
Vasudevan Deepak Kumar
Personal Homepage Tech Gossips
The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep!
|
|
|
|
|
Correct. But you can carry it round on a USB stick or upload your encrypted .kdbx to somewhere.
|
|
|
|
|
I use lastpass however I only use it for local accounts 192.168.X.X (both home and work) and online forums where the damage that someone can do if they got my password is minimal. I do not have any financial accounts in lastpass. Although that ends up causing me to have much simpler passwords for my financial accounts than my forum accounts which seems backward however it will have to do for now..
John
modified 20-Nov-12 9:58am.
|
|
|
|
|
I use LastPass as well, but I use it for everything. The way it's set up (from my understanding) even if someone got access to the file saving your passwords they'd still need to decrypt it, and my password for it is long and complicated. I'm not sure what encryption they use, but most of the current standards can only be quickly cracked if the cracker is used on a computer that has recently had the password in memory, and that means to crack it they would likely need access to my computer anyways (because even on the fastest brute forcing machines the universe will likely die before my password is cracked that way).
|
|
|
|
|
It's no worse than having a local password manager, and letting it auto-update -- or update at all, for that matter; it should have the strongest possible blocks in your firewall applied to it.
How any of that stuff can possibly be safer than a piece of paper in your pocket, I have no idea.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Much simpler to just have one password.
Every man can tell how many goats or sheep he possesses, but not how many friends.
Shed Petition[ ^]
|
|
|
|
|
ChrisElston wrote: Much simpler to just have one password.
One password for everything!? That is really dangerous.
Vasudevan Deepak Kumar
Personal Homepage Tech Gossips
The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep!
|
|
|
|
|
Vasudevan Deepak Kumar wrote: One password for everything!? That is really dangerous.
Yes, but really easy to remember.
|
|
|
|
|
Yup, and if it's "password", no-one will ever think to try it -- reverse psychology works every time.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
I use reverse psychology for my password.
It is ygolohcysp.
Sorry.
Every man can tell how many goats or sheep he possesses, but not how many friends.
Shed Petition[ ^]
|
|
|
|
|
Doesn't that send you back to your home dimension?
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
It's not that bad, I mean none of you know that I was born in Bristol in 1976
Every man can tell how many goats or sheep he possesses, but not how many friends.
Shed Petition[ ^]
modified 20-Nov-12 10:03am.
|
|
|
|
|
ChrisElston wrote: none of you know that I was born in Bristol
Are you a twin?
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Nope, but I can be a bit of a tit.
Every man can tell how many goats or sheep he possesses, but not how many friends.
Shed Petition[ ^]
|
|
|
|
|
ChrisElston wrote: I mean none of you know that I was born in Bristol in 1976
So you're password is "TitsAbba"...
Panic, Chaos, Destruction. My work here is done.
Drink. Get drunk. Fall over - P O'H
OK, I will win to day or my name isn't Ethel Crudacre! - DD Ethel Crudacre
I cannot live by bread alone. Bacon and ketchup are needed as well. - Trollslayer
Have a bit more patience with newbies. Of course some of them act dumb - they're often *students*, for heaven's sake - Terry Pratchett
|
|
|
|
|
It is a much more elegant solution as well, thus it must be the right one.
|
|
|
|
|
I use the same password for a lot of throwaway forum accounts that I don't really care about. It's less dangerous to have grouped passwords than it is to entrust your passwords to something that stores them, surely? If you put them in a password safe then your attacker only needs to break into that to have them all!
|
|
|
|
|
|
The people that use online password managers are the same people that use online backup services and/or online banking.
".45 ACP - because shooting twice is just silly" - JSOP, 2010 ----- You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010 ----- "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass." - Dale Earnhardt, 1997
|
|
|
|
|
I use online banking but never had to use the others.
Lobster Thermidor aux crevettes with a Mornay sauce, served in a Provençale manner with shallots and aubergines, garnished with truffle pate, brandy and a fried egg on top and Spam - Monty Python Spam Sketch
|
|
|
|
|
I do use online banking and a few other online storage services like Dropbox, Skydrive, Cubby etc. But I don't think it is wiser to save and/or clip our credentials to an online storage beyond the perimeter of local system.
Vasudevan Deepak Kumar
Personal Homepage Tech Gossips
The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep!
|
|
|
|
|
Just how do you go about avoiding online banking? Do you think that your offline banking records aren't stored "online"? You probably don't even need an "online" bank account to have your personal data and records stored in their system "online".
When I worked for a broker we had clients too paranoid to do "online" trading. Guess what, it just meant they mailed or called in their sh*t and it went directly online.
|
|
|
|
|
I have no need to do online banking. That's how I avoid it.
".45 ACP - because shooting twice is just silly" - JSOP, 2010 ----- You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010 ----- "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass." - Dale Earnhardt, 1997
|
|
|
|