Why on earth do people who read HN keep their passwords in a cloud service? pass/gopass, stored in git over ssh on a server I control, and I have access to all my passwords everywhere while only relying on the security of ssh and gpg...
It's not just ssh and gpg, it's every single service you have running on it, every piece of hardware and the OS itself.
I use lastpass because it is safer than what I was doing before using a password manager and most inconvenience I'm willing to put up with for my day to day computing.
I like to think of it as a convenience vs security chart of password schemes and for me lastpass is on the pareto frontier of it and happens to be the most convenient option on that frontier.
What do you mean about distributing passwords in plaintext? Can you be more specific for me?
It's not the pareto frontier of security, it's the pareto frontier of security versus convenience. It's not exactly a "thing", it's just a mental model I use for thinking about security trade-offs.
I can't imagine not having the app or browser extensions to autocomplete these passwords for me. I even use their 2FA service.
How much work does it take you to create a password for a new account, or retrieve a password when logging to an existing account?
It's really not that bad. There are extensions but I decided that auditing their code was harder than just using one of the terminals I already have open.
Autocompletion is a security nightmare, and 2FA really doesn't help, you're blindly trusting LastPass.