Hacker News new | ask | show | jobs
by zaneyard 3379 days ago
See the beauty of using program + cloud-provider is that all the cloud provider sees is an encrypted file. If one were to gain access to my Google Drive they would still have to crack an encrypted file which will take a while.

I feel like with lastpass the attack vector is bigger with all the fancy features.

1 comments

It's encrypted on the lastpass "cloud" too. The point of it being integrated is the user doesn't have to take action to download the encrypted DB; the software does it for you.
But you don't want the software that is capable of decrypting the DB to also be responsible for uploading to a fixed cloud service!