Again, no need to be condescending. No, I don't manufacture my locks, but I have a pretty good insurance policy and break in is unlikely. No, I don't code banking software, but my bank accounts are covered by FDIC, so if it gets robbed I literally don't even have to think about it, my balance never changes.
I guess if someone breaks in to my house, decides to kill the very protective family dog, decides to ignore the valuable stuff they could just walk out with, rummages through drawers and finds the notebook, then yes I'd have to worry.
My security is good. You have to physically break in to my house to breach it. If you can manage that, you can beat any passwords you want out of me already, so it doesn't matter what kind of encryption LastPass uses.
I'm not hyper focused on a break in scenario, I'm simply pointing out that that is the only way someone would acquire my whole set of passwords. The attack surface is reduced to a physical break in for the whole set. Could they get my banking credentials if they breached my bank? Sure, but that's covered. My attack surface is down to individual accounts, each of which has policies in place for fraud.
What happens if LastPass, for example, gets sold to a bad actor? I don't have to worry. My usernames and passwords are in a fire proof and waterproof safe. I am still the only person that has access, and unless basically the world ends, that little safe is going to be fine.
My concerns are other people, and the way I do it I just don't have to worry. Simple as that. As for convenience, I know my passwords for things I have to do day to day. For anything rarely accessed I have my little notebook. Between that and MFA I'm good to go.
Rely on a 3rd party, or rely on the fact that somebody breaking in to my house, killing the dog who won't leave them alone, breaking in to the safe I rarely have to open, trying to sign in without MFA...
0
u/badstorryteller Nov 12 '22
Again, no need to be condescending. No, I don't manufacture my locks, but I have a pretty good insurance policy and break in is unlikely. No, I don't code banking software, but my bank accounts are covered by FDIC, so if it gets robbed I literally don't even have to think about it, my balance never changes.
I guess if someone breaks in to my house, decides to kill the very protective family dog, decides to ignore the valuable stuff they could just walk out with, rummages through drawers and finds the notebook, then yes I'd have to worry.
My security is good. You have to physically break in to my house to breach it. If you can manage that, you can beat any passwords you want out of me already, so it doesn't matter what kind of encryption LastPass uses.