2451
General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently
« Last post by wraith808 on March 22, 2017, 02:04 PM »Offline isn't really an advantage to some of us. My use case, it's a disadvantage.
Recent Posts
Have they changed the core mechanics of how it works, or is it still 100% utterly useless?
Last time I looked at it, the design meant compromised master password == having to change each and every password you've used it for.
Also, what this guy wrote.-f0dder (March 22, 2017, 02:35 AM)
Nothing about LessPass? Surprisingly little activity on that thread, and that's what I'm looking at switching to.-wraith808 (March 21, 2017, 08:11 PM)
LessPass uses very interesting ideas, but I don't plan to move to it because I have an old-fashioned password manager program that runs locally (though it does sync the encrypted database via dropbox - or maybe it's google drive). I manually copy/paste my passwords instead of using any browser integration. I'm happy with that solution. I believe it's safe enough for me because even though the database is in the cloud, it's not in a centralized database with a lot of users - anyone compromising it would be someone targeting me specifically rather than collecting passwords for thousands or millions of people.
Though I would be quite interested in hearing about anyone else's experience - maybe it'll convince me to switch.-mwb1100 (March 21, 2017, 08:49 PM)
Just installed LastPass yesterday and deleted logins from my browser. What now?-fredemeister (March 21, 2017, 08:19 PM)
you could export your data from LastPass (https://lastpass.com...=showfaq&id=1206) and put it into something else?-mwb1100 (March 21, 2017, 08:52 PM)
See on their forums they've fixed the problem with Chrome, and working on the FF version. May just wait a while since I spent the effort and time migrating away from the browser this week.-fredemeister (March 21, 2017, 10:17 PM)
Oh, that's a lot of work for me. I have connected the tool with other software. When I switch to an other Version I have to adjust a lot of code. If I have more time I sign up again.
But thank you for quick answers ( Great Tool).-ffbb (March 21, 2017, 04:21 PM)
It got to the heuristic scanning after about 30 minutes- which on the longer side, but not overly so. The rest of the time was just that. I've changed the schedule to once a week in the dead of night on Monday morning. I'll see how it goes, but not upgrading any of my other machines until I figure this out.Actually, ~30 minutes is pretty much what MB2 takes on my desktop computer when the scan includes checking for rootkits (without that, it takes about half as long). So perhaps the problem you're experiencing is something wrong with the heuristic scanning in MB3, rather than something absurdly excessive about the entire scanning process. Have you reported this on the MBAM Forum?-wraith808 (March 19, 2017, 08:02 PM)-cyberdiva (March 19, 2017, 08:37 PM)
I don't see what that has to do with the heuristic scanning.-wraith808 (March 18, 2017, 01:43 PM)
Wraith, I'm very sorry to hear about your horrendous experience with MB3, but I'm most grateful to you for posting about it. You've saved me from moving to MB3 from MB2. One very weird thing about your present experience is that apparently it's the heuristic scanning that is taking so long. In MB2, the heuristic scanning occurs at the end of the scan and takes VERY little time, perhaps a minute or so.-cyberdiva (March 19, 2017, 07:01 PM)
Looks cool, but I don't get it to work with XYplorer, using the portable version apimonitor-x86.exe. I have XYplorer.exe listed and selected in "Monitored Processes" but no API calls are listed.-DonL (March 19, 2017, 04:42 PM)
API Monitor can be a helpful tool for investigating. Although it is marked as alpha software, it did work when I needed it at the time. It is both free and available as PortableApp.-Shades (March 18, 2017, 11:10 PM)
FWIW, I use XY and do not see this problem. Also even though there's obviously no obligation to do so, I think it's completely reasonable for a vendor to suggest that problems with the software be discussed in his forum rather than some other random place on the internet. If nothing else, the XY forum has a number of very dedicated users who might be able to help in addition to Don.
I think everyone should be aware the Don is a software vendor who puts his money where his mouth is when it comes to support.-mwb1100 (March 18, 2017, 02:56 PM)
Just to add another voice, I also have a lifetime license, and I have also had the "sleepytime" every time I have installed XYplorer (installing the newest release every time I try). Not constantly, but often enough to aggravate me, and it usually occurs soon enough after installation that I get discouraged. And, like Wraith, I can't point to any common circumstances when it happens.
I'll pull down the current version and give it another go, last time I tried was at 16.50. I always liked the interface. :-)-x16wda (March 18, 2017, 03:31 PM)
Almost what you want:
Edit planned scanning > Edit > Plan frequency > Once-Curt (March 18, 2017, 01:40 PM)
I agree this should be discussed in XY's user forum.He was just saying that it should be split into a different thread, which I agree with. I don't have an account on your forum, and I try to limit my participation on several different forums - too much of a time sink. If you don't want to continue here, that's fine. I'll continue as I have been, and thank you for your time so far.-DonL (March 18, 2017, 01:17 PM)
Have you tested the latest version (17.70)? This thing is evolving and, contrary to some others, it's usually getting faster with each release.
-DonL (March 18, 2017, 04:37 AM)
That's not what that said to me, but maybe it's in the reading, ...-wraith808 (March 17, 2017, 10:08 PM)
It's in the reading, if you ignore the overenthusiastic hype in the heading and first couple of paragraphs:With the launch of Malwarebytes 3.0, we are confident that you can finally replace your traditional antivirus ...
That says to me that they think their product can now perform the function of an normal AV program.
They then go on to say you can still use your AV program in tandem with it:But rest assured, we continue to support compatibility if you choose to use a third-party antivirus or other security software alongside Malwarebytes 3.0.
ATM, I'm still running v2 after the debacle of trying to get v3 to install, upgrade, or work.
I can't understand why they wouldn't see that going from signature style virus detection to signature-less would naturally increase the load on system resources.
One can only guess that the only machines they have to test on are all using top tier components.-4wd (March 18, 2017, 02:33 AM)
my version is in Danish, so these are my translations of the User's Interface:
Open Malwarebytes 3 > Settings > Schedule scanning > check Type > click Edit , then in Type of Action change "Normal", to "Defined by User" or Hyper.
Modified:
1) I am not quite sure, because I can't remember this part, but you may have to first delete the job that was already there (instead of editing it), and only then create a new job with your preferred type of action.
2) oh, yeah, Fill "Exclusions" with everything you already trust. Why not?
Malwarebytes 3 is easy to live with, but we have to do the settings, don't we.-Curt (March 18, 2017, 04:54 AM)
Weird that nobody in my forum reports this. And I'm sure they would. They are merciless.-DonL (March 17, 2017, 04:16 PM)
The only downside I see is that this uses A LOT more CPU than before, it shoots up to 100% CPU load on an i7 4770K when it would be like around 20% in the background before, is this where the 4x speed increase comes from?
Funny thing is, I have a high DPI monitor without the font set to over 100%, a
Well I guess I should refer to these fixes as fixes for those with Windows Text Size setting over 100%, as that is what is improved -- regardless of the resolution. Hopefully these latest fixes won't cause any issues for those with 100% text size setting.-mouser (March 17, 2017, 07:47 PM)
What a shame-f0dder (March 17, 2017, 07:26 PM)
)