Gentoo Archives: gentoo-user

From: Neil Bothwick <neil@××××××××××.uk>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Questions about hacked sites and passwords
Date: Tue, 17 Jan 2012 11:10:57
Message-Id: 20120117110809.34f7c35b@digimed.co.uk
In Reply to: Re: [gentoo-user] Questions about hacked sites and passwords by Dale
1 On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote:
2
3 > >> I use Lastpass which does about the same as other password
4 > >> managers.
5 > > Doesn't LastPass store your passwords on their servers, and weren't
6 > > they compromised last year? I'll stick with KeePassX, the password
7 > > database is stored and encrypted locally. Even if I put it on
8 > > DropBox, hacking that will only give the encrypted database.
9 > >
10 > >
11 >
12 > None of the passwords were lost tho.
13
14 This time.
15
16 > They got everyone to change them
17 > just in case but according to what I read, the hackers didn't get
18 > anything.
19
20 This time.
21
22 > Keep in mind, they are encrypted locally, then sent to
23 > them. They can't see the passwords either.
24
25 How is it encrypted? If the encryption system is not open source, it is
26 not trustworthy.
27
28 > So, Lastpass is basically the same thing you use. It just has a
29 > different name. lol
30
31 Not really.
32
33 I wouldn't store my banking passwords anywhere online, in fact I cannot
34 access my bank account with password alone. I also need my debit card,
35 PIN and the card reader they supply. This generates one-time password
36 using my card's details and no online component. I realise that card
37 security is not the greatest, but if they've got my card and PIN, I'm
38 screwed anyway.
39
40
41 --
42 Neil Bothwick
43
44 This man is depriving a village somewhere of an idiot

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-user] Questions about hacked sites and passwords Dale <rdalek1967@×××××.com>