Slashdot Mirror
LogMeIn To Acquire LastPass For $125 Million (lastpass.com)
An anonymous reader writes: LogMeIn has agreed to acquire LastPass, the popular single-sign-on (SSO) and password management service. Under the terms of the transaction, LogMeIn will pay $110 million in cash upon close for all outstanding equity interests in LastPass, with up to an additional $15 million in cash payable in contingent payments which are expected to be paid to equity holders and key employees of LastPass upon the achievement of certain milestone and retention targets over the two-year period following the closing of the transaction.
LassPass got their ass handed to them in the no-so-distant past. No, thank you. Having a company that collects passwords now marrying a company that handles remote logins. Hmmm... What could go wrong?
They are talking about combining it with the Meldium product? Look at the pricing on that. It starts at 24/month
I just took a $120 chance and added 10 years to my subscription... Figure they can't jack up my prices for 10 years if I already paid for it. $120 isn't too much to lose if they make the product unusable (which is a possibility with these a**holes).
+++ATH0 NO CARRIER
I used one of these passwords services back in the day. Coincidentally, the one I used (Xmarks, which started as a browser plug-in) was later acquired by Last Pass, which's being acquired by another company.
I wonder if my passwords would be safe during all these M&A's when the buyer eventually turns out to be a little less than ethical (what if it gets bought out by a Chinese company?), not to mention all the technical possibilities of data leak while integrating all the infrastructure.
Damn, I like the free version of LastPass... a lot. I do not like any of the services that LogMeIn offers (I've run the office account).
Sooooo /. hivemind... are there any alternatives to LastPass out there?
Any strong words re: https://www.dashlane.com/passw... ?
Hire me...
On Hawaii 5-0, Lo Mien is the arch underworld rival of Lo Fat. Log Mein is what I see in my toilet.
Some drink at the fountain of knowledge. Others just gargle.
Now ALL your passwords can be compromised in one hack.
Say "hello" to progress!
Just cruising through this digital world at 33 1/3 rpm...
LastPass Free will no longer be available and instead move entirely to a monthly subscription service for only $15 a month. Oh Premium was $12 a year? No worry! Our professional customer support that you'll never need more than make up for this 1500% increase in price!
I liked(ed) LastPass a lot. But my problem is that it is now another product. When it was its own company, LP put 100% behind the one flagship product. Now, LP is "another" product and will receive resources based on value to the owner.
Yes.
It is called a Simple or Complex and Unique Long Password System, or SCULPS for short. (patent pending, pls no steal)
Take a sentence, a quote if you will. Take out important word(s), replace it with something unique to you.
Now, take away the spaces and replace the spaces with a number unique to you. (so1something2like3this4)
Congrats, you already have a password better than LastPass passwords and just as random, and will NEVER be brute-forced with any brute-forcing library as long as you are alive and the sentence is at least 5 reasonably average sized words with a number that isn't 1234 or pi.
Now comes the unique part, if you want to add extra security by preventing same-password-use-itis.
easy route: You can go the easy route and use any random word assigned to a website. This is easier, but it is also easier to forget since it isn't based ON the name. Example words could be a funny person related to the website, or someone well-known and loved/hated (apk ).
Or it could be some funny word people have come up with and use, or something you have come up with.
harder route: Take your service / website name, condense it to 2 character groups of letters based on major components of the word or something similar, just make it smaller. (Facebook = fabo, slashdot = sldo, google = goog)
You can, if you want to, use the full name, but I wouldn't.
Now you can add a number on the end of that. Say, the same condensed name encoded using the standard phone number grid.
Harderer route: As above, now split the alphabet in to groups. Say, A-G, H-M, N-S, T-Z. Arrange that in to 2x2 grid.
On top axis, add letters. On left axis, add numbers. Recreate your (condensed) service name based on the axes in whatever direction you prefer.
All left then all top (xxxx,yyyy), left-top left-top (xy,xy,xy,xy) etc., or whatever you want.
You could even be some mad-man and try to use a grid cell for each separate number and letter. (punctuation as well, but as you know, some password schemes are awful and don't allow them)
So, using the above on hardest:
Mary Had A Little Lamb Little Lamb -> Mary Had A Massive Phone Massive Phone
Remove spacers and replace with number: 3.14159 (skipping point) -> Mary3Had1A4Massive1Phone5Massive9Phone
Gridify it: Slashdot (SLDO), with 01 and GP on the axis, 1001GPGG.
Mary3Had1A4Massive1Phone5Massive9Phone1001GPGG.
I think that is right. Should be. I am eating so I might have made a mistake.
There are various other ways you can do stuff with this, making it simpler or harder to fit your needs.
You could make the sentence as long as you can be bothered to make it. (as long as it isn't one of those pesky limited password length crap services, automatically tells you their server-side DB is probably unsecure as hell)
You can go as low as high with the grid separation as you are capable of remembering. For the love of god don't forget this part, use the phone number grid if you aren't confident enough, or similar grid-ified system.
You could even go full paranoia, requiring you to actually sketch down your grid scheme for things you actually consider super ultra turbo secure, like bank information or something.
You could even go Captain Paranoid and write an equation that spits out your password number, or grid, or similar.
This is Slashdot damn it, the more pointlessly complex and paranoia-fuelled, the better!
Of course, another thing you could do is use this system to encrypt your lastpass passwords and become the King of Paranoialand.
warning: will not work for people with low imagination or memory skills. Any attempt to use this will lead to blackholes and doom. DON'T DO IT.
For those who have experience with both KeePass and LastPass (ideally on an iOS and OSX) how do they compare? Is KeePass as tightly integrated into the browsers in both ecosystems as LastPass is?
What a nice story about how all the passwords that were entrusted to LastPass are being sold to LogMeIn. Of course, there will be less fanfare when the story is " NSA To Acquire LogMeIn For $200 Million ". Or maybe that already happened.
I'm an American. I love this country and the freedoms that we used to have.
Without you giving LastPass your master password and access to your two-factor authentication (you are using two-factor, right?), they couldn't tell you even one of your passwords if their lives depended on it.
That hardly matters. Consider what a password is, it is a way to get into an account. What you really care about is that others can't access your accounts, not that they can't unscramble all of the hashes and find out the perverted strings that you used to create your passwords. So if LastPass can be sold to LogMeIn or to the Chinese or to the N.S.A. then they have bought a way to get into your "protected" accounts. It really doesn't matter if they can retrieve the silly little strings that you think protect you or not.
I'm an American. I love this country and the freedoms that we used to have.
Unfortunately, your passwords are weak. Good managers like LastPass, KeePass, etc. allow all of those passwords to be 30-character random strings using all symbol types.
.: Semper Absurda
I just checked and I have 228 passwords in my lastpass account. All of them are random strings of numbers, letters, and symbols. Less than 1% of them have less than 30 characters (due to lame restrictions imposed by certain websites that only allow short passwords). Your 32 passwords are probably used on more than one site. None of mine are duplicated. You may not want it, but you really do need a password manager.
Good news there are still other alternatives like Sticky Password (http://www.stickypassword.com) or Roboform.
I use Intuitive Password online password manager. It's a web-based password manager and your data is securely stored in the datacenter. With Intuitive Password, you can easily access your data at any time, any where. It works on all devices without installation.
Intuitive Password: www.intuitivepassword.com