[serf]

Lastpass is a huge target, and while I believe they generally take reasonable security measures, for many the risk of compromise may be greater than an encrypted stand-alone password database.

Couldn't you frame that same basic belief around any large 'nearly-monolithic' web service, like Google, Apple, or Facebook?

I agree, passwords are a risky business (you're storing security tokens for other people for chrisakes), but the power that access to someones Facebook or Google account is pretty equivalent - people run their worlds on those services.

By the way, I happen to agree with your stance. We rely on singular entities far too much on the net.

[ocdtrekkie]

Yes, and I'd consider Google, Apple, and Facebook huge targets with major compromise risk as well. People tell me Google security is absolutely without equal, but when it's hacked, I, for one, will be unsurprised.

With cloud services hacks, there is no "if"s, only "when"s.

[zaroth]

What do you mean "when"? Google was hacked quite thoroughly by China a few years past. Not to mention the NSA.

[ocdtrekkie]

How about... "when" it'll happen again then. ;)