[ale] Of password managers and family...

Mon Oct 23 10:18:42 EDT 2017

I would sincerely appreciate switching my family to Linux, but that just 
isn't going to happen.  My sister loves her Macbook, my mother knows 
Windows and that's what she'll use.  Good luck ever getting my father to 
use anything other than what he *absolutely* must use for work under 
Windows.  And they're all on iPhones, which is where a password manager 
would also need to be.  I also don't have the bandwidth to maintain more 
computers for people, too.  I've done my best to get them to a state 
where they're as self sufficient as possible and work with them.  My 
brother-in-law plays video games with his friends pretty regularly which 
require windows.

Switching them all to Linux is probably the *highest* barrier to entry 
for them. :P

For what it's worth, though, I have been using KeePassXC for months now 
and I adore it.  KeePassX is no longer under current development.  
Someone forked it and is actively developing KeePassXC.  The change from 
X to XC is basically a package replacement.  The interface is nearly 
exactly the same, plus it supports the chrome plugin that autofills for 
you, chromelPass.  I would recommend changing over to KeePassXC for, if 
nothing else, current development support.

---
Very respectfully,
Kyle Brieden

On 21-10-2017 05:48, DJ-Pfulio wrote:
> KeePassX is what most of my family uses, including my 80+ yr old Mother 
> (when
> she was alive).  It changed her life (her quote, not mine).  But Mom 
> stopped
> using Windows after being totally hacked and she got backup religion 
> too.  Of
> course, I setup everything so most of it was automatic and I maintained 
> her
> system from 3 states away.
> 
> I've made the same offer to my extended family - I'll maintain their 
> computer,
> provided they run Linux.  I don't touch commercial OSes.
> 
> Linux is the lowest "barrier to entry" solution, IMHO.
> 
> 
> 
> On 10/20/2017 04:16 PM, Kyle Brieden wrote:
>> I completely and totally appreciate your stance on this, Joey.  My 
>> family don't
>> fall into our category, though :P
>> 
>> I can't say I trust anything that's opaque or outright blackbox 
>> myself, but
>> *something* is better than *nothing*, which is what they have right 
>> now. 
>> There's a reason companies like LastPass thrive.  They are trusted to 
>> do the
>> hard things for people who can not or do not want to.  I guess, 
>> overall, what
>> I'm asking for, is this:  "Which company do y'all feel is most 
>> trustworthy?" 
>> Additionally, "Which tool is easiest to use so that someone who would 
>> actively
>> avoid learning 'those computery things' would be willing to utilize 
>> this?"
>> 
>> ---
>> Very respectfully,
>> Kyle Brieden
>> 
>> On 20-10-2017 15:55, Joey Kelly wrote:
>>> On Friday 20 October 2017 15:30:56 Kyle Brieden wrote:
>>>> Howdy all,
>>>> 
>>>> I've been using a KeePass vault for password management for a little
>>>> while now.  I use my NextCloud server (SUPER awesome, do recommend) 
>>>> for
>>>> syncing the vault between computers and mobile devices.  I use 
>>>> KeePassXC
>>>> on Windows, Mac, and Linux, and I use different apps on my Android 
>>>> phone
>>>> and iPad respectively.  This is all well and good for *me*, because 
>>>> I
>>>> like the open source, I own all the hardware, I'm doing this all on 
>>>> my
>>>> own kind of feel, but this isn't sustainable for anyone more than
>>>> myself.  I have been bitten in the ass before by my vault getting 
>>>> out of
>>>> sync between two devices or being open on multiple devices at a 
>>>> time.
>>> 
>>> Someone needs to LART me because this is an AOL "me too!" reply.
>>> 
>>> I do not trust any foggy service to hold my passwords. I am a 
>>> hardcore geek
>>> and enjoy bash, so I decided to spin up yet another half-finished 
>>> project to
>>> vault my passwords a year or so ago, using Perl and AES. My script 
>>> asks me for
>>> the master password, then lets me view or change any particular 
>>> entry. I have
>>> to manually copy and paste the passwords.
>>> 
>>> I don't trust others, but I trust me, and ain't no way I'm going to 
>>> leak data,
>>> even encrypted data, to the web.
>>> 
>>> --Joey
>>> 
>>>> 
>>>> My family (fiancee, sister, brother-in-law, mother, and father) need
>>>> protection.  They NEED to stop reusing passwords and set up a 
>>>> password
>>>> manager.  Does anyone have any opinions on low barrier to entry, low
>>>> friction password managers for the non-technical in our lives?  I've
>>>> investigated LastPass thus far, and the price seems worth it to me.
>>>> LastPass seems trustworthy, too, with how open they are about their
>>>> technology stack.  I have looked at some others, such as Padlock, 
>>>> too,
>>>> which seems like a good open source alternative.
>>>> 
>>>> Thoughts?  Opinions?  Feelings?  Success and/or catastrophic failure
>>>> anecdotes?
>>>> 
>>>> Thanks!
>>>> 
>>>> ---
>>>> Very respectfully,
>>>> Kyle Brieden
>> 
>> 
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x89C9D831.asc
Type: application/pgp-keys
Size: 3053 bytes
Desc: not available
URL: <http://mail.ale.org/pipermail/ale/attachments/20171023/b73b5f82/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://mail.ale.org/pipermail/ale/attachments/20171023/b73b5f82/attachment.sig>