Hacker News Reader

Comment by 746F7475 | Hacker News Reader

So the threat is that if someone hacks Dropbox and gains accesss to your Dropbox they can read which sites you visit?

Wouldn't this be "self fixing" problem, if you use 1Password to comeup with a secure Dropbox password?

Obviously this isn't ideal situation, but I see no reason to switch away from 1Password and currently I don't even know where I would go from 1Password. I jumped from LastPass to 1Password since I want to have access to my passwords on mobile devices without paying a yearly fee and now that LastPass has been acquired by LogMeIn I'm in no hurry to jump back. And I don't know if opensource managers like KeepPass have mobile support.

View on HN

Another problem is that Dropbox can see which sites you are visiting.

And? If you use Facebook, Twitter, G+ or Google Chrome you are already broadcasting every site you visit

You leave Condoleeza out of this!

Sounds like some people are self-hosting their 1PasswordAnywhere files, and thus are easily indexable.

But isn't that users fucking up? Again not saying that 1Password shouldn't encrypt the file just that they are not exposing your files to the public.

This is like people uploading their private RSA keys to Github

People host their AgileKeychain file publicly facing on the Internet?

There is Minikeepass, supports keepass files on iOS. (http://minikeepass.github.io/)

You can also use 2-factor authentication with dropbox.

I think that the issue is some people don't consider Dropbox a good option to store much of anything unencrypted for sharing... This comes down to Dropbox being a U.S. company, subject to DOJ requests and gag orders, and complying with them, iirc.

I'm a little less concerned... though, I use LastPass, I used to use KeePass on dropbox, but lastpass has better integration into the browsers on the platforms I use (less good on android with chrome though, and there's the fee). I don't know that there's a better option that's as seamless for users.

Well 1Password is a good solution, expect this meta leaking and I guess U.S. gov can hoover up all that data and see where you are logging in, but I don't know, you just have to weight the options. Actually now that I'm employed and not a student I could easily afford LastPass' yearly fee for mobile, but the LogMeIn buying them thing is a big no-no for me for now. I have to check back in few months or a year and see if LastPass is still usable. Or maybe I'll just try my hand at writing myself a custom solution

I honestly would love to see something resembling "self-hosted" that used dropbox/onedrive/whatever as a common location for the storage, based on keepass. If it weren't for my desire to not be locked into a browser, I'd honestly just use chrome's synchronized passwords.

Reply on news.ycombinator.com