Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Wow, single point of failure for all my accounts, all my credential, all my personal, private and public data. I would love to use it!


I know you're being sarcastic, but with lastpass you can rotate most of your passwords.

https://blog.lastpass.com/2014/12/introducing-auto-password-...


Anyone know of an open source Firefox extension that can do this?


I don't, but would the extension in-effect need to have all your passwords too? Since I don't know of any battle tested (multiple very bad vulnerabilities exposed in public) password managers that offer this other than LastPass, I say check out the public opinion of that extension.


Yes, but as an extension it could just call into Firefox (which has all the passwords) to do all the work.


Have you tried this? It fails for most sites IME.


Yes I did (I didn't want to say it, disappointing most HNers).

I works for most of the major websites (Google, Amazon, etc. I think you can look them up). And also handles multiple google accounts pretty well, even when an google account is logged in, without logging it out. And it definitely doesn't works for the majority of the websites.

(And now for the skeptical ones) I'd say use it for websites you use 2FA since any bug (or intentional backdoor) won't be successful.

PSA: If you're using LastPass for managing passwords, DONOT use their 2FA authenticator app, since now it offers an option to autofill option. Now that is the point where you're crossing into al eggs in one basket territory.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: