Conversation

Notices

1. Louzao/SoyDelBierzo :uv: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:51 JST Louzao/SoyDelBierzo :uv:

   Reading Lastpass data leakage, I noticed this:

   "The threat actor was also able to copy a backup of customer vault data from the encrypted storage container, which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs"

   If you're a Lastpass user, attackers now have your personal data, and the websites where you have an account.

   Expect targeted phishing campaings.

   https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

   • aab (aab@khp.ignorelist.com)'s status on Friday, 23-Dec-2022 19:00:35 JST aab

     in reply to
     @louzao Interesting! I use KeePassXC, and the database is stored in my own Nextcloud, so sync between devices (2 computers) is done automatically.
     I've heard really good things about Bitwarden, would you tell me in what ways it is better for you?
   • Louzao/SoyDelBierzo :uv: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:41 JST Louzao/SoyDelBierzo :uv:

     in reply to

     • Bitwarden
     • ratatop

     @glaber @bitwarden I used it time ago, finally move to local Bitwarden instance only accesible from my network

   • ratatop (glaber@mastodon.green)'s status on Friday, 23-Dec-2022 19:00:49 JST ratatop

     in reply to

     • Bitwarden

     @louzao @bitwarden KeePassXC might also be worth a look! It's essentially as good as Bitwarden but offline, so a different use-case

   • Louzao/SoyDelBierzo :uv: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:00:50 JST Louzao/SoyDelBierzo :uv:

     in reply to

     • Bitwarden

     Time to migrate to @bitwarden

     It's opensource, encrypts everything, you can run your own server, free for personal use, $10 yearly Premium account...

     https://bitwarden.com/

   • aab (aab@khp.ignorelist.com)'s status on Friday, 23-Dec-2022 19:27:51 JST aab

     in reply to
     @louzao Gracias!
   • Louzao/SoyDelBierzo :uv: (louzao@masto.louzao.network)'s status on Friday, 23-Dec-2022 19:27:53 JST Louzao/SoyDelBierzo :uv:

     in reply to

     • aab

     @aab I use it to store files like ED25519 private keys, TOTP passwords and secure sharing passwords, or files with my partner.

     I have a local instance running inside a LXC container on a Proxmox server, with daily backups stored on a Cryptomator container in a public cloud.

     Client app uses local copy of data in mobile/tablet, only needs server access to add new sites.