undefined | Better HN

0 pointsnoduerme3y ago0 comments

How hard is it to store encrypted data that needs a locally held master key to decrypt? Pick any industry... You'd have to be willfully ignorant or outright corrupt to fail your core business promise, wouldn't you?

0 comments

quanticle3y ago

The average user that LastPass caters to thinks that a "backup" is the reason they were late for work in the morning. LastPass doesn't want to be in a position where they're telling their users, "Sorry you're SOL," if their device breaks and they don't have a second copy of their locally-stored encryption key.

noduermeOP3y ago

[edit] I guess that's true. I'm not sure who their users are, but obviously not people overly concerned about security. [/edit]

Just because I think it's funny - every time I visit my dad (who's in his 80s) he regales me with his startup ideas. "Why don't you build something that I can put on my glasses so when I lose them I can find them? Whoever invents that would be a billionaire." I say, "Yeah dad, they have that."

"Why don't they make it so I don't have to remember passwords for all these different websites? I could just have one password and it would remember it for everything."

I think I've explained at least a dozen times why I think third party trust is a bad idea; I've had to really refine it down to the level of explaining this to a six year old.

But the salient point here is that even my dad never signed up for LastPass. So who the fuck is signing up for LastPass?

riffraff3y ago

Companies. It is to convenient to use a shared password manager to share passwords within a group of people or some such.

Also techies have been telling non-techies "use a password manager!" for years, and people fail to evaluate one solution or the other.

My brother in law (a non technical person) was telling my wife last year how good LastPass was for him!

j / k navigate · click thread line to collapse