Hacker News Reader

Comment by bargl | Hacker News Reader

Well looks like I'm going to have to convince, my wife, family, extended family, and friends that they all have to switch password managers now.

I'm blown away, I've been a fan since day one because of it's simplicity and availability.

I am torn between waiting to see what happens and giving them the benefit of the doubt and just changing all my passwords before Logmein can f--- me.

View on HN

Having not used anything by Logmein or heard much about them, what's the reasoning behind wanting to jump ship asap?

Are they just bad at running a company or are you scared they will sell your data or similar?

Just based on the bad things everyone else is saying about them, I have to do some research and see if they are a good or crap company. They just have a lot of power regarding my passwords, and they are an unknown to me, but , in the other thread they were seriously disliked.

Edit: I read some of the comments on https://news.ycombinator.com/item?id=10359491 and most of them have bad things to say about LogMeIn.

Because you can't buy trust through an acquisition. You build trust, you don't transfer it through a merger.

This is 100% spot on. And when it comes to password mgmt, trust is everything.

LogMeIn is used by those phone scammers who ring up and say "We have detected a Windows Virus on your machine and are here to help". They then convince the mark to let them start a session, then surreptitiously download data from their machine using a back channel. (LogMeIn lets you share screens, but also access the filesystem in another panel and the other side can't see).

When you complain to LogMeIn and give them the details of the scammer, they couldn't give a rat's arse and just ignore you. Those kind of ethics do not belong with the owners of a password vault.

Source: Experience trying to report a bad actor.

I know the popular thing is to blame LogMeIn, but it would be very expensive to chase down the scammers. And, law enforcement is very likely to not give a shit, too. So, if the did what you said, likely it would be wasted effort.

"Thank you for the information, we will investigate/confirm, cancel their account, put them on a watchlist" would have done. I'm not after prison time, I'm after LogMeIn not allowing their service to be used by identifiable criminals.

I'm in the same awkward position. I've been a LastPass evangelist for years now. How can I abruptly switch to 1Password or whatever's most comparable to LastPass? The selling point I would make of, "Hey, this company exists solely to provide security to the world. They're passionate about using strong passwords and do everything in their power to ensure their service is both friendly and secure." wasn't just a talking point, but one of the primary reasons I ever used them in the first place.

I'm happy for the LastPass team that they were able to profit off their hard work, but I'm leery of what this means, not only for the hundreds of my passwords and notes LastPass has in its vault, but what sorts of "features" LogMeIn will want to forcibly integrate into the product--and then charge 50x my lowly $1 a month contribution.

I don't know why this guy is being downvoted. I, too, am now looking for a new password manager. All I need one is that does local decrypting only, supports Chrome and Firefox, and can do Android as well.

Unnecessary negativity; against the HN standards.

Be civil. Don't say things you wouldn't say in a face-to-face conversation. Avoid gratuitous negativity.

gratuitous- uncalled for; lacking good reason; unwarranted.

I feel that my comment falls into what I consider a fair statement about the severity of the situation. They have my passwords and could easily hike up their rates. This change may add features I didn't know I wanted, but thus far I'm happy with the way LastPass has been operating and I don't want a change.

This comment meets the standard. Negativity without any explanation was the issue. Thanks for clarifying.

The explanation was easily inferred. Not a huge fan of your interpretation.

What's your explanation then?

What are you asking me to do? Explain someone else's post to you after they took the time to spell it out specifically for you?

I won't be doing that.

Sorry, I meant "Why did he get downvoted then?" I got hit for trying to explain what I thought was a reasonable scenario.

I'll tell you what I think. I was right; he was too negative; and folks feel threatened by that. Fits the data here pretty well.

KeePass [http://keepass.info/] has worked well for me across Firefox and Android, though I haven't tried it on Chrome.

What do you mean when saying that KeePass works for Firefox?

It's likely GeorgeHahn means KeeFox - http://keefox.org/

"KeeFox connects Firefox to KeePass Password Safe"

That actually works rather well. You should add the toolbar button though, then it works like LastPass.

Blur from abine.com.

Well, export your data ASAP. At least if shit happens you won't lose it all. Would be funny if LMI spent 120MM just to have a product everyone leaves. lol.

Logmein has a great tech organization and certainly hasn't ruined meldium since they bought it. I think they've made a couple boneheaded moves around enterprise pricing that people have pointed out here, but expect they'll take good care of it.

I've had great success with dash lane so far. It even has the ability to share passwords securely with friends, colleagues.

I find this to be a huge unnecessary paranoid overreaction that I am not surprised to find on Hacker News. :/

Reply on news.ycombinator.com