TOP

MashedLife | Making Life Easier For You

Other day I brought before you a web based personal assistant which allows you to keep track of your usernames and passwords you use to access various web based services. The service, named Pageonce, delivers everything Web users love about the Internet including relevant products, services and offers, and nothing they don’t.

The service increases the security of your Internet accounts by assigning different user names and passwords to each account and managing them from Pageonce. The service allows you to manage all family members’ frequent flyer accounts from one place, defend against identity theft & online fraud by being aware of account statuses in real time.

Today, I am presenting before you another web service that offers the same genere or service named, MashedLife. The service allows you to access all of your online accounts from one secure place, log in to Facebook, YouTube, online forums, Digg, or any sites from any PC, Mac, even an iPhone w/o typing username/password.

MashedLife is not only for the busy trendy types. For senior & little family members who can’t keep track of their online fun & social accounts, you should set up MashedLife accounts for them.

– MashedLife.com

The service is free, so other than having to clear the hurdle of consciously entrusting it with your login information, its a quick test. It is also being positioned as a very safe and secure facilitator. Once your information is saved, and you later return to a page, a MashedLife bookmarklet sends the website data and a “big random number” to request information registered with the service. This process is said to operate “on top of SSL.” once MashedLife authenticates the transmission, it “encrypts and sends it back via the secure HTTPS session.”

MashedLife | LIFE IS GETTING MORE EASIER
MashedLife | LIFE IS GETTING MORE EASIER

When you navigate to a site’s login page, click on mashed life’s bookmark from the browser. From your browser, the mashed life bookmark sends the login page and a big random number with the request as the key to further encrypt the communication on top of SSL.The bookmark is actually a “bookmarklet”, a small piece of Javascript code that performs the bookmark login action for you.

Because the bookmarklet code knows which site you are at when you click on the login bookmark, you need only one Mashed life login bookmark to log in to all sites.

Mashed life bookmarklet decodes encrypted information inside your browser, fills in your account login information, and logs you in. All this happens with just one click without the user to type in the username/password.

Mashed Life is not a proxy. It is just filling out the login form to help the user log in, then transfers the control back to the user’s browser to communicate with the target site directly. No communication goes through Mashed Life after you are logged in to the target site.

Mashed life supports Yubikey for strong authentication. And the login is immune from key logger attacks in this way:

The difference between Pageonce and MashedLife is that MashedLife uses a Secure Socket Layer for its transactions, and I think this is an advantage of MashedLife.

MashedLife
Website : www.mashedlife.com
Location : Sunnyvale, California, United States

The Mashed Life Service is an online service where individuals that have signed up with Mashed Life can create and save encrypted entries containing confidential information. Once you’re logged into MashedLife, you can simply click on the link next to each stored account to launch a new tab or window and do bookmark login, or direct login if that site allows.


  • polocanada

    Both companies support Yubikey. However, Lastpass is locally encrypted and then sent to the server (to correct the last post) vs. mashedlife the password is handled on their server. Both has pluses and minuses. in LP case, it is the “safety” of your “local” machine before submitting encrypted data and reliability of the java script application they rely on in the browser window. (if you try to log on the service with a browser that doesn’t have the addon or plugin installed, it will ask you to install it, since it won’t run without the add-on). In ML case it is a question of “trust” in their service and security measures to convert and store the data. No passwords are actually processed locally. In LP case I feel better if I am working on a computer I know well and is clean. In ML case it seems more safe to use in internet caffees etc, since nothing is done through local computer. Additional consideration is that some places don’t allow you to install add-ons to browser. So ML would be only way to go here. Again, if a peson is paranoid, the best solution is to use a very complex passord, remember it and change it every 2 weeks. If you can take compromises both LP and ML seem to be OK. With notable exception that LP seems to be getting much more traction recently. That could have two effects: 1) better developement and security and 2) more attacks and hackers interested to hack the services. It’s like being hungry and having to choose one of two cakes ;-) )

  • ipern

    Cool idea and have seen a couple new offerings in this space over the last two weeks. Not sure how they (mashedlife) do the password management on the server side and protect end-users’ security/privacy. Prefer locally-encrypted and locally stored password solutions like Lastpass (www.lastpass.com) reviewed on lifehacker last week (http://lifehacker.com/5041463/lastpass-saves-and-syncs-passwords-between-all-your-browsers)

    The social aspect of the sharing is clever and available via Lastpass too. I think that will be a more useful form of bookmarking going forward. Cool idea from both companies