From plug-discuss-bounces@lists.phxlinux.org Fri Feb 5 12:38:46 2021 Return-Path: X-Original-To: lurker@lists.phxlinux.org Delivered-To: lurker@lists.phxlinux.org Received: from phxlinux.org (localhost [127.0.0.1]) by phxlinux.org (Postfix) with ESMTP id 2715632A0009; Fri, 5 Feb 2021 12:38:45 -0700 (MST) X-Original-To: plug-discuss@lists.phxlinux.org Delivered-To: plug-discuss@lists.phxlinux.org Received: from mail-ej1-f49.google.com (mail-ej1-f49.google.com [209.85.218.49]) by phxlinux.org (Postfix) with ESMTPS id 7596B32A0005 for ; Fri, 5 Feb 2021 12:38:43 -0700 (MST) Received: by mail-ej1-f49.google.com with SMTP id r12so13715452ejb.9 for ; Fri, 05 Feb 2021 11:38:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=jTjcC7tFdbf8B3qJW3xpv8ObAakw++yNq4+PuqaNCGA=; b=X2og/wUX8vb0cQrp7KyrpYvwd1NYYtA1YfE0PlQB3T2FoTce87rloCqMsxN8BXXmYS 54kOKVNXiHO9s6F5FYFMR7p4H7H8DmPvHc9Gv7Vrf7tRmSnfYusyQBqe2spQaJN1s6wk mqs/Rvz2Yganrjk8dD/gZibR/xrETIDxkSbSNIu8ngGM8PwOu8DBOCVFRVu+s4jYIsj8 Nf32fmsYe3i9/Fqk+Bq59XFi8ethSAu/fk/PlRGur+Vpu7cWzBcSOhuEfIuEQ8XI4NIE dN6exoLbJ1ev8pjCyTkQOZ9Mk5O5z1bX/CVjtdWcEBYBbef98r2FjcrJjyKlqlCmoPJl z+lA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=jTjcC7tFdbf8B3qJW3xpv8ObAakw++yNq4+PuqaNCGA=; b=UovXbjjtYP3r+HvvL5Lm8wwK9nfIeTHBVBSblxZ37pRZp6Jrn0yFGPRIJcANNunJv7 wQkMbfDDUzcZMQau/mXTZMxjD8411dddkU4fr4iyLs/WimbHy3jdnuJswsgjJX8Dkg7L Gzwlgj98qU15pcJm/9kxq4S8W+laMU2cqdwVTfLZ6/XDsiBmxn+X/KDse75g+ifAOa9c 3Myy2+x8WMYqsiQ/Q3nXLBmH5HDRjE6cXJsPZpcbIJKr3IbsL/VZBEFdAwULR1CxvHkW Y83dxRM9WSMun83bSOpLNfJEzX7r6kpHJQ6VwBwXC722JwLm1EIqa538N8DuVfqnanH7 9m2g== X-Gm-Message-State: AOAM533g6rGN1U4sN92v5H0aOnyfhvAS4ZkkBjECtHsPkb4AjyFInrkE ekY6NOBuDtxrBoN4rgkwpAZBBCdLyGH6bn/X+K3/wR9Awzo= X-Google-Smtp-Source: ABdhPJzpN7eyY6eydjRiBI0Lqi7UuaAgY74+mlidgVxUP5hn1NM0ZvifPKPjKCVzik6TVf1pgGcGRfB2nWoBPshKiLQ= X-Received: by 2002:a17:906:3a89:: with SMTP id y9mr5444222ejd.4.1612553921882; Fri, 05 Feb 2021 11:38:41 -0800 (PST) MIME-Version: 1.0 References: <2176e52c-eb90-f77f-42b3-4804304719dd@mattcrews.com> In-Reply-To: Date: Fri, 5 Feb 2021 14:38:30 -0500 Message-ID: Subject: Re: compromised passwords To: Main PLUG discussion list X-BeenThere: plug-discuss@lists.phxlinux.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Main PLUG discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Thomas Scott via PLUG-discuss Reply-To: Main PLUG discussion list Cc: Thomas Scott Content-Type: multipart/mixed; boundary="===============5421110316917828924==" Errors-To: plug-discuss-bounces@lists.phxlinux.org Sender: "PLUG-discuss" --===============5421110316917828924== Content-Type: multipart/alternative; boundary="000000000000b1f10b05ba9bf7fa" --000000000000b1f10b05ba9bf7fa Content-Type: text/plain; charset="UTF-8" Moved to bitwarden after Matthew G recommended it on this list - haven't looked back - Thomas Scott | mr.thomas.scott@gmail.com On Thu, Feb 4, 2021 at 8:28 PM Andrew McRobb via PLUG-discuss < plug-discuss@lists.phxlinux.org> wrote: > Wait, you guys don't write your passwords on notepads you leave everywhere? > > In all seriousness, KeePass for the win. My only issue is there isn't a > good way to automatically migrate new passwords from phone to desktop. > > I was thinking of writing my own little password manager using some > GoLang, Postgres and a simple frontend stack that uses something like ngork > to create a tunnel if I use my phone outside of my network just for kicks. > > On Thu, Feb 4, 2021 at 5:25 PM Michael Butash via PLUG-discuss < > plug-discuss@lists.phxlinux.org> wrote: > >> Key folks here recommended KeepassXC after looking at migrating away from >> Lastpass back to something more local/trusted, and it's been pretty good >> for me under linux. I miss the cloud integration of passwords on my phone >> too, but deal with this otherways. Not always ideal, but I really don't >> trust GoToMeeting that owns Lastpass now to be worth a crap, so I'll take >> signal to send myself a password with an expiration occasionally as a "note >> to self" vs. corporate whore with no foundation in reality like >> gotomeeting. They still don't even have a linux meeting client, they can >> die a painful death as I am concerned. >> >> I use keepass with my yubikey, I feel pretty good with this for >> encrypting data for .gov/major orgs local or rest of the world. >> >> -mb >> >> >> On Thu, Feb 4, 2021 at 4:41 PM Ryan Petris via PLUG-discuss < >> plug-discuss@lists.phxlinux.org> wrote: >> >>> I'm surprised no one has mentioned KeePass yet. KeePassXC is open >>> source, stores data locally, is secure, and supports some other things like >>> OTP token generation. You can then sync the database with Nextcloud, >>> dropbox, etc. >>> >>> On February 4, 2021 4:14:33 PM MST, Matthew Crews via PLUG-discuss < >>> plug-discuss@lists.phxlinux.org> wrote: >>>> >>>> On 2/4/21 2:59 PM, Snyder, Alexander J via PLUG-discuss wrote: >>>> >>>>> Do you have time to talk about our lord and savior LastPass? >>>>> >>>>> Also, please don't store passwords in your browser. >>>>> >>>> >>>> I'm more of a BitWarden person myself, but any password manager is >>>> better than storing it in your browser. >>>> >>>> -Matt >>>> ------------------------------ >>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>>> To subscribe, unsubscribe, or to change your mail settings: >>>> https://lists.phxlinux.org/mailman/listinfo/plug-discuss >>>> >>>> --------------------------------------------------- >>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>> To subscribe, unsubscribe, or to change your mail settings: >>> https://lists.phxlinux.org/mailman/listinfo/plug-discuss >> >> --------------------------------------------------- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> https://lists.phxlinux.org/mailman/listinfo/plug-discuss > > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > https://lists.phxlinux.org/mailman/listinfo/plug-discuss --000000000000b1f10b05ba9bf7fa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Moved to bitwarden after Matthew G recommended it= on this list - haven't looked back

-= Thomas Scott | mr.thomas.scott@gmail.com=C2=A0


On Thu, Feb 4, 2021 at 8:28 PM Andrew McRobb via PLUG-discuss &l= t;plug-discuss@lists.phx= linux.org> wrote:
Wait, you guys don't write your passwo= rds on notepads you leave everywhere?

In all seriousness,= KeePass for the win. My only issue is there isn't a good way to automa= tically migrate new passwords from phone to desktop.

I was thinking of writing my own little password manager using some GoLa= ng, Postgres and a simple frontend stack that uses something like ngork to = create a tunnel if I use my phone outside of my network just for kicks.
=

On Thu, Feb 4, 2021 at 5:25 PM Michael Butash via PLUG-discuss <plug-dis= cuss@lists.phxlinux.org> wrote:
Key folks here recommended Kee= passXC after looking at migrating away from Lastpass back to something more= local/trusted, and it's been pretty good for me under linux.=C2=A0 I m= iss the cloud integration of passwords on my phone too, but deal with this = otherways. Not always ideal, but I really don't trust GoToMeeting that = owns Lastpass now to be worth a crap, so I'll take signal to send mysel= f a password with an expiration occasionally as a "note to self" = vs. corporate whore with no foundation in reality like gotomeeting.=C2=A0 T= hey still don't even have a linux meeting client, they can die a painfu= l death as I am concerned.

I use keepass with my y= ubikey, I feel pretty good with this for encrypting data for .gov/major org= s local or rest of the world.

-mb

<= /div>

On Thu, Feb 4, 2021 at 4:41 PM Ryan Petris via PLUG-discuss <plug-discuss= @lists.phxlinux.org> wrote:
I'm surprised no one has mentioned KeePass yet.= KeePassXC is open source, stores data locally, is secure, and supports som= e other things like OTP token generation. You can then sync the database wi= th Nextcloud, dropbox, etc.

On February 4= , 2021 4:14:33 PM MST, Matthew Crews via PLUG-discuss <plug-discuss@lists.phxl= inux.org> wrote:
On 2/4/21 2:59 PM, Snyder, Alexander J via PLUG-discuss w=
rote:
Do you have time= to talk about our lord and savior LastPass?

Also, please don't = store passwords in your browser.

I'm more of a BitW= arden person myself, but any password manager is
better than storing it = in your browser.

-Matt
PLUG-discuss mailing list - PLUG-discuss@lists.p= hxlinux.org
To subscribe, unsubscribe, or to change your mail settin= gs:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss=
----------------------------------------= -----------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/= plug-discuss
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/= plug-discuss
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/= plug-discuss --000000000000b1f10b05ba9bf7fa-- --===============5421110316917828924== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tClBMVUct ZGlzY3VzcyBtYWlsaW5nIGxpc3QgLSBQTFVHLWRpc2N1c3NAbGlzdHMucGh4bGludXgub3JnClRv IHN1YnNjcmliZSwgdW5zdWJzY3JpYmUsIG9yIHRvIGNoYW5nZSB5b3VyIG1haWwgc2V0dGluZ3M6 Cmh0dHBzOi8vbGlzdHMucGh4bGludXgub3JnL21haWxtYW4vbGlzdGluZm8vcGx1Zy1kaXNjdXNz --===============5421110316917828924==--