Lastpass with Tor/TorMail/VPN etc...

Discussion in 'privacy technology' started by popcorn, Apr 4, 2012.

Thread Status:
Not open for further replies.
  1. popcorn

    popcorn Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    239
    Hi I use Lastpass, also use Tor+VPN+anonYmouX,
    question is when I log into or use Lastpass to generate passwords and save sites for TorMail or any "secure" email, am I compromising any privacy/anonimityo_O?
     
  2. PaulyDefran

    PaulyDefran Registered Member

    Joined:
    Dec 1, 2011
    Posts:
    1,163
    LastPass proper never gets your decrypted info, so I wouldn't think so. You just need to make sure your LastPass pass-phrase is a good one.

    PD
     
  3. popcorn

    popcorn Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    239
    Ok figured so....
    so a lastpass account created with a real name Email cannot be linked to anonymous Email/accounts in that lastpass vault?
    Is there such a thing as cross site/account cookie contamination o_O for want of a better description.
     
  4. PaulyDefran

    PaulyDefran Registered Member

    Joined:
    Dec 1, 2011
    Posts:
    1,163
    I am not positive, so I won't speculate, but if you want to listen to exactly how LastPass works, you can listen to GRC Security Now #'s 256 and 257 (IIRC, it may be 257 & 258 ) and look for weaknesses in privacy. Last pass does connect through the network to sync the latest encrypted database initially, and every x minutes I believe...so if you do it while on the VPN, they would get pinged by your VPN IP. I believe all they get is a hash, to verify you, but I don't know if they can tie a hash to a real world user.

    Now that you have me thinking, you may have have found something. It's not a flaw with LP, but a privacy concern. Using a Tormail address may be best. It also means maybe two accounts for when you're not on the VPN. It also obviates using the paid version, as they don't take cash, Bitcoin, or Liberty Reserve, etc.... (Being US a pre-paid Visa may work).

    Why don't you send an email to support and see what they say. They also have a forum. This may turn into a great thread.

    PD
     
  5. popcorn

    popcorn Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    239
    Awaiting response from LP...
    hope its positive if for nothing else just the fact that I like LP, makes life so much easier :rolleyes:
     
  6. PaulyDefran

    PaulyDefran Registered Member

    Joined:
    Dec 1, 2011
    Posts:
    1,163
Loading...
Thread Status:
Not open for further replies.