LastPass for Firefox in Linux can't copy things to clipboard.
Which is sort of important in a password manager.
Nobody knows why and when this will be fixed. It started with the move to webextensions, but chrome has this and Firefox on windows and Mac also has this. It's been like this for months. Support just says this is not supported.
I'd say fuck them, but they're still best in terms of Linux support, so?
@matejcik I use https://www.passwordstore.org/ and want for nothing
For things that can't handle the linux copy/paste scene I just print to a terminal and select
@cwd ehhh I have kind of a distaste for pass? it's encrypting with gpg and storing things in git, which has an immutable history forever, that just doesn't smell right to me.
(also windows. I need this to work basically on all platforms)
@matejcik only immutable if you push it to the cloud :)
Also I keep mine in git but it doesn't seem to by default.
What is your beef with gpg? Other than the abysmal usability which pass spackles over rather well
@cwd well, the whole of gpg is abysmal from the inside out ;)
basically I don't trust that gpg just happens to do the right thing re saving passwords in a bunch of separate files, a task it's not designed for. is the encryption deterministic? are there nonces somewhere in the mix? is it right to use asymmetric encryption for this? who even knows.
@matejcik valid questions, the best part about floss is you don't have to wonder :)
@cwd true, but, like, i shouldn't have to? It's a password manager. There should be something about security right on the homepage, showing that someone thought about it. "Encrypted with gpg" is no more informative than "protected by a master password" in this sense.
@matejcik don't they all have a master password? In a crypto sense I don't know of any problems with gpg, but the interface is horrible.
FLOSS is the price of admission onto my laptop so I'm biased there.
I agree that pass is almost pointless but that's what I like about it, just some shell script glue to leverage the existing tools (such as cross device rsync, though I don't trust the phone enough for that)
Just my unix dork opinion :)
@cwd ...In the meantime I figured out *why* I dislike pass: it's not doing what I want a password manager to do. I want:
- browser integration (plugin)
- cross device sync (DIY)
- solid security (maybe there?)
For these things, pass is not better and possibly worse than keepass, which is my baseline.
Not saying that pass is bad! To each their own, of course. It's just that I don't see the point of it.
So I opened the LastPass extension and looked for the clipboard code. Far as I can tell, the problem is that Firefox disallows clipboard modification from the background.
So instead of pulling the string to the foreground and copying from there, the extension instead disallows copying.
Because of course it does.
I mean. Of course.
I liked LastPass, but maybe I shouldn't have looked at their source code.
so, something like hijack lastpass-cli to real time sync with keepass and then use keepasshttp extension instead, maybe?