Re: [gentoo-user] Re: [OT] Seamonkey and LastPass

[Dale]

chrome://messenger/locale/messengercompose/composeMsgs.properties:
> On Sat, 2009-11-28 at 20:44 -0600, Dale wrote:
> ...
>
>> Another situation I was thinking about.  Let's say it is as secure as
>> they CLAIM it to be.  If someone stole my puter, I could go to lostpass
>> and change the master password or just close the account.  Then even my
>> computer would be useless to them.  From my understanding you have to
>> type in the master password from time to time.  If it is changed through
>> the website, I'm sure it would require it to be re-entered.
>>
>>
> ...
>
> Give most competent techs your machine and the data is theirs - unless
> you have taken some extreme precautions.  Standard IBM hardware is not
> designed to be secure, and with the exception of some laptops (which in
> most cases, things like encryption via the IDE interface available on
> some Dell's and others, isnt even turned on!), most of those are not
> either.
>
> Lostpass looks ideal for those who lose/forget/do not really understand
> what passwords are about - its better than the alternatives such people
> come up with (a common, easily guessed password, or none if they can get
> away with it).  Got something valuable/want to keep private, dont use
> them, or some of the google apps and others.
>
> In fact, I know of some who have a separate, locked down a/c on their
> machines just for banking - no browsing (and no extraneous browser
> plugins) to other sites etc. - safer! (and relatively simple to do and
> manage under nix)
>
> BillK
>

It is true that if a person breaks in and takes your puter, they can do 
anything they want.  I'm sure there are some that can set up their 
system so that grub can't be edited without a password and the file 
system is encrypted but then again, they may take the time to actually 
type in a really long secure password for each site too.

Lastpass is a good start but having something on the net having access 
is what made me post here to begin with.  I would like to have something 
that is close to what lastpass does but just locally or something that 
is confirmed my independent review.  If the code was reviewed by someone 
we all know can be trusted, like the Seamonkey folks, or it was open 
source for all to see, then that would help.  People that know 
programing can put their approval stamp on it that it works and does 
what it says it does and nothing else.

For me, I wouldn't usually forget a password but if a person got the 
password for my checking account, then they would have the password for 
the rest.  I sort of have passwords based on the strength I need.  My 
longest and hardest to guess is my checking and credit card.  Things 
like my email, forums, b.g.o and others could be guessed if someone 
wanted to try it.  I would like to be able to have really long and 
secure for them all but I would get bored of all the typing and having 
to keep up with different ones for each site.

It's funny, the one thing that helps us keep out stuff safe is the most 
difficult to manage.

Dale

:-)  :-)