• Prove_your_argument@piefed.socialEnglish
    12 days

    At least it’s just salesforce data and not actual vaults and secrets.

    I moved away from these guys a long, long time ago when they started upping subscription costs.

    • spaghettiwestern@sh.itjust.worksEnglish
      12 days

      When Logmein acquired LastPass in 2015 I moved to Keepass and haven’t looked back. If the word enshittification existed back then it would have applied perfectly.

        • WindyRebel@lemmy.worldEnglish
          12 days

          What signs are pointing to them going to shit? I don’t exactly keep up on this stuff, but I use their product and it is perfectly fine for me.

          • Dultas@lemmy.worldEnglish
            11 days

            Sold to private equity and I think going closed source on some stuff IIRC.

        • spaghettiwestern@sh.itjust.worksEnglish
          12 days

          Keepass & Syncthing has worked for years without an issue, even though my DB is opened on multiple devices at once. It is rare (once or twice a year) that I have a minor, easily solved sync problem.

    • Squizzy@lemmy.worldEnglish
      12 days

      I stopped my sub and havent noticed any changes to service. The autofill was never used so I just log in to grab a password for old logins and they are there.

  • Mereo@piefed.caEnglish
    12 days

    I selfhost Vaultwarden on my server. I use the Bitwarden client to access my passwords.

  • PotatoesFall@discuss.tchncs.deEnglish
    11 days

    I heard thr saying, “LastPass is the Last Password manager you should ever use”. That was like, what, three breaches ago?

    • adarza@piefed.caEnglish
      11 days

      …meaning you shouldn’t be using any of them now, i guess.

      i would trust a notepad file or spreadsheet on my pc over any online service.

  • WhatsHerBucket@lemmy.worldEnglish
    12 days

    The Klue supply chain attack was claimed by the Icarus extortion group, who compromised the infrastructure of the AI-powered market intelligence platform and stole OAuth tokens that connected customers’ Salesforce environments.

    At least someone is finding good use for AI lol

  • Fizz@lemmy.nzEnglish
    11 days

    Thats not so bad. I swear sales is always a magnet for this shit. They constantly insist on integration with the most dogshit slop products.

  • Faceman🇦🇺@discuss.tchncs.deEnglish
    12 days

    Haven’t used Lastpass since the logmein deal rubbed me the wrong way, went to dashlane for many years but they had some security scares just recently. now I self host Vaultwarden, which is a bitwarden compatable server.

    for maximum security I could have it local only and connect to it via VPN directly, but I put it behind nginx, with SSL, fail2ban with only my IPs whitelisted and a geofilter on top of that. so even if someone did manage to make it to the login page of the admin panel, they’d need a 30 digit passphrase and an email address username that only exists for that one application, get it wrong once and you are blacklisted.

    • vrek@programming.devEnglish
      12 days

      That would make me so scared. Imagine having 1 or 36 too many beers and you need to check your bank account to see if you can afford the 49th beer so you mistyped one digit of your passphrase and now locked out of everything.

  • fireshell@fedia.io
    11 days

    A separate mention should be made of PearPass. It is a new password manager, direct synchronization between devices without central cloud storage, store data locally on your devices and apps for major platforms.

    PearPass as an interesting new option worth keeping an eye on.

    • UndergroundParking@lemmy.cafeEnglish
      10 days

      Interesting. Not using discord, either! Will keep an eye in case keepassxc’s qt6 migration becomes a big enough pain.