On Thu, Oct 23, 2014 at 10:58 PM, Dan Covill <[email protected]> wrote:
> I have two accounts that use the 2-step (NOT 2-factor) login. (One is > Vanguard.) Each has two LastPass entries, one for the UserId and one for > the pw. Normally, in neither case will LastPass detect the UserId request, > so I enter it manually. In both cases, LastPass then autofills the > password entry (which is on a different page). > > Occasionally I will get an autofill on the UserId. This seems to happen > when I did NOT go there from my bookmark, but replied to an alert link to > the login page. > > Wish I knew what to put in the bookmark to make LastPass see it, but it's > reliable enough so I can live with it. > I've been using LastPass for a couple of months, and I'm pretty pleased with it. I have run into a couple of sites with issues, and they can usually be resolved by deleting that account and trying again, or doing some Googling and usually ending up on the LastPass tech support site with a resolution. Passwords stink as a security measure; they always have. Primitive armies beat the "who goes there?" challenge out of captured prisoners. That situation hasn't changed: http://xkcd.com/538/ After using LastPass to generate difficult-to-hack passwords, I wonder if we'll go to the next step and add smartcards to our identities. LastPass has a bundle with YubiKey (https://lastpass.com/yubico/) so you can add a physical item to the knowledge of your password. A hacker in Omaha may get your password from a badly-protected website, but they'll not get the smartcard. The prices on these have gone down spectacularly. Even Google is getting into the act: But they still suffer from the fatal flaw of sticking straight out from our sleek laptops, begging to get snagged as we move the machine around, wreaking havoc on themselves or far worse, on the machine (a $6 key is toughened so it doesn't break, and instead cracks the motherboard of the $1500 laptop to which it is attached, is not good design.) The latest, Yubikey Neo-N fits into the USB socket, but at a premium cost of $60. Does anyone have one of these yet? I'd be interested in experiences. -- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/cacw6n4sselw_jgw2wax1ugkz1sqslq7lbxdp0jrg50razba...@mail.gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

