Viewing a single comment thread. View all comments

Man_in_the_uk t1_j5vq6zc wrote

Reply to comment by OSUBucky in Everyone Wants Your Email Address. Think Twice Before Sharing It. by 08830

Screw that, look at what happened with this..

https://thecrow.uk/lastpass-data-breach-is-starting-to-look-truly-horrendous/

5

FnTom t1_j5vtxro wrote

You can self-host Bitwarden and limit it to a local environment. That way, security breaches on their server would mean absolutely nothing to you.

15

misconfigbackspace t1_j5w4d4w wrote

Specifically this: https://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/

2

rhinosyphilis t1_j5wfy9b wrote

The edits on that article say that they upped iterations to 350k. I heard on my fav security podcast that it was 600k (show notes aren’t posted yet, when they are I’ll update this with their reference). If you’re self hosting though your vault is on your own servers.

8

misconfigbackspace t1_j5y8guk wrote

I have no beef with any particular online password provider. Because I use Keepass with the password file shared on a google drive folder on very limited desktop / laptop computers. I don't use a smartphone.

0