Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Willie WY Wong
On Tue, Jan 17, 2012 at 12:11:14PM +, Penguin Lover Neil Bothwick squawked: > I was sceptical when it first arrived, but it's really easy to use and > no password needed since the card reader generates it for you. It looks > like a small calculator with a card slot, so easy enough to carry arou

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 08:14:36 -0500, Tanstaafl wrote: > > PWM looks interesting too, especially the auto-completion, however > > there's no ebuild for the desktop client:( > > Yeah, but you could always just us the Firefox extension to test it > our/play with it. I don't use the Desktop Edition

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 08:00:07 -0500, Tanstaafl wrote: > > It comes to the same thing really. whether you store the passwords > > themselves or the methods and data used to generate them, both systems > > are as strong as the master password and useless if that is > > compromised. So stick with what

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 8:03 AM, Neil Bothwick wrote: PWM looks interesting too, especially the auto-completion, however there's no ebuild for the desktop client:( Yeah, but you could always just us the Firefox extension to test it our/play with it. I don't use the Desktop Edition...

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Érico Porto
is there a gal here? Érico V. Porto On Tue, Jan 17, 2012 at 11:00 AM, Tanstaafl wrote: > On 2012-01-17 7:50 AM, Neil Bothwick wrote: > >> On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: >> >> I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 07:52:56 -0500, Tanstaafl wrote: > KeePassX looks interesting, and although I dearly love pwm, there are > some irritating things about it (cannot sort or easily reorder accounts > for example)... but, the deal breaker for me is it apparently doesn't > have the option to *no

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 7:50 AM, Neil Bothwick wrote: On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I put it on DropBox, hacking that will only give the encrypted database. And I'll stick with passwordmake

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 2:02 AM, Florian Philipp wrote: Concerning how I'd handle it: I use app-admin/keepassx with a master password. I'd just change the random amazon password as I've not memorized it. KeePassX looks interesting, and although I dearly love pwm, there are some irritating things about

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 07:37:38 -0500, Tanstaafl wrote: > > I'll stick with KeePassX, the password database is > > stored and encrypted locally. Even if I put it on DropBox, hacking > > that will only give the encrypted database. > > And I'll stick with passwordmaker, which doesn't store the passw

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 6:29 AM, Florian Philipp wrote: Other features: - there is an android app (read-only access for now) As does passwordmaker (pwm) - and an iphone app too... - there is a Windows version (including portable version for memory sticks) Since it is a firefox plugin, it is supporte

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-17 3:41 AM, Neil Bothwick wrote: I'll stick with KeePassX, the password database is stored and encrypted locally. Even if I put it on DropBox, hacking that will only give the encrypted database. And I'll stick with passwordmaker, which doesn't store the passwords at all, anywhere..

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Tanstaafl
On 2012-01-16 9:22 PM, Dale wrote: One reason I ask this. I remember my passwords well. If I go to changing them every time someone gets hacked, I'll never be able to keep up with them again. I use Lastpass to remember them but it could stop working because of a upgrade or something. Then ag

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 05:29:23 -0600, Dale wrote: > >> None of the passwords were lost tho. > > This time. > > And maybe not the next time either, or the next time, or the next > time. Point is, can you state for a fact that no site will ever be > broke into, ever? No, which is why I prefer not to

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Florian Philipp
Am 17.01.2012 12:29, schrieb Dale: > Neil Bothwick wrote: >> On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: >> > I use Lastpass which does about the same as other password > managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year?

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Florian Philipp
Am 17.01.2012 12:14, schrieb Neil Bothwick: > On Tue, 17 Jan 2012 12:06:40 +0100, Willie WY Wong wrote: > >> For users of KeePassX, what are its main benefits? Best I can tell it >> offers a searchable GUI (is it accesible on the command line?), and > > There's a command line interface out there,

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Dale
Neil Bothwick wrote: On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored an

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 12:06:40 +0100, Willie WY Wong wrote: > For users of KeePassX, what are its main benefits? Best I can tell it > offers a searchable GUI (is it accesible on the command line?), and There's a command line interface out there, google for kpcli. > AES or Twofish encryption of a d

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 04:27:09 -0600, Dale wrote: > >> I use Lastpass which does about the same as other password > >> managers. > > Doesn't LastPass store your passwords on their servers, and weren't > > they compromised last year? I'll stick with KeePassX, the password > > database is stored and

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Willie WY Wong
On Tue, Jan 17, 2012 at 08:41:53AM +, Penguin Lover Neil Bothwick squawked: > On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: > > > I use Lastpass which does about the same as other password managers. > > Doesn't LastPass store your passwords on their servers, and weren't they > compromised l

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Dale
Neil Bothwick wrote: On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored an

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-17 Thread Neil Bothwick
On Tue, 17 Jan 2012 01:35:54 -0600, Dale wrote: > I use Lastpass which does about the same as other password managers. Doesn't LastPass store your passwords on their servers, and weren't they compromised last year? I'll stick with KeePassX, the password database is stored and encrypted locally. E

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Dale
Florian Philipp wrote: Am 17.01.2012 03:22, schrieb Dale: Howdy, It was on the news that some company got hacked into that was related to Amazon. They said Amazon users should change their password just as a precaution. I have a questions tho. I use some pretty good passwords for the things

Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Florian Philipp
Am 17.01.2012 03:22, schrieb Dale: > Howdy, > > It was on the news that some company got hacked into that was related to > Amazon. They said Amazon users should change their password just as a > precaution. I have a questions tho. I use some pretty good passwords > for the things that matter, s

OT: Re: [gentoo-user] Questions about hacked sites and passwords

2012-01-16 Thread Chris Walters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 1/16/2012 09:22 PM, Dale wrote: > Howdy, > > It was on the news that some company got hacked into that was > related to Amazon. They said Amazon users should change their > password just as a precaution. I have a questions tho. I use some > pret