Viewing a single comment thread. View all comments

OSUBucky t1_j5u24b7 wrote

Reply to comment by Man_in_the_uk in Everyone Wants Your Email Address. Think Twice Before Sharing It. by 08830

You need Bitwarden. It’s a life saver!

31

Man_in_the_uk t1_j5vq6zc wrote

Screw that, look at what happened with this..

https://thecrow.uk/lastpass-data-breach-is-starting-to-look-truly-horrendous/

5

FnTom t1_j5vtxro wrote

You can self-host Bitwarden and limit it to a local environment. That way, security breaches on their server would mean absolutely nothing to you.

15

misconfigbackspace t1_j5w4d4w wrote

Specifically this: https://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/

2

rhinosyphilis t1_j5wfy9b wrote

The edits on that article say that they upped iterations to 350k. I heard on my fav security podcast that it was 600k (show notes aren’t posted yet, when they are I’ll update this with their reference). If you’re self hosting though your vault is on your own servers.

8

misconfigbackspace t1_j5y8guk wrote

I have no beef with any particular online password provider. Because I use Keepass with the password file shared on a google drive folder on very limited desktop / laptop computers. I don't use a smartphone.

0

DrB00 t1_j5wrfuv wrote

Just use KeePass and manage your passwords. Upload it to a cloud service and the password database is still encrypted.

5