Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How did my LastPass master password get leaked?

news.ycombinator.com

Post reply on HN
Print view View original

71–80 of 529 posts

Re: Ask HN: How did my LastPass master password get leaked?

#71

Post by ajb »

dogman123 wrote: post #47
gregsadetsky wrote: post #38

Earlier quoted context omitted.

What, really?? This is too crazy of a coincidence to be a coincidence. This is exactly what's happening to me, and same IP prefix. What does it mean? --- How old of account was this? Can you contact me by email (email in my profile)? --- Two theories: - there is a problem with LastPass - you and I both had the same Chrome extension installed that was actually compromised, and that extension was listening to/sending p…

posting another comment here too for visibility, but this _just_ happened to me as well.... Time Monday, December 27, 2021 at 1:41 PM EST Location São Paulo, SP 01323, BRAZIL IP address 160.116.88.235

Not sure it's really in Brazil.

LACNIC says the IP range was transferred to AFRINIC. They then say that it is owned by:

Affiliated Computing Services (Pty) Ltd descr: P. O. Box 261333 descr: Excom 2023 country: ZA

But then further note that ownership is in dispute! We need someone to look it up in the current routing tables to see where it's presently being routed to.

Re: Ask HN: How did my LastPass master password get leaked?

#72

Post by ChrisMarshallNY »

I remember reading that LastPass had a breach, some time ago.

I think that LastPass and 1Password are the ultimate targets for hackers.

Wouldn't surprise me if they got in. Hackers ain't Matthew Broderick, anymore.

EDIT: Deleted somewhat cynical editorializing

Re: Ask HN: How did my LastPass master password get leaked?

#74

Post by gregsadetsky »

ajb wrote: post #71
dogman123 wrote: post #47

Earlier quoted context omitted.

posting another comment here too for visibility, but this _just_ happened to me as well.... Time Monday, December 27, 2021 at 1:41 PM EST Location São Paulo, SP 01323, BRAZIL IP address 160.116.88.235

Not sure it's really in Brazil. LACNIC says the IP range was transferred to AFRINIC. They then say that it is owned by: Affiliated Computing Services (Pty) Ltd descr: P. O. Box 261333 descr: Excom 2023 country: ZA But then further note that ownership is in dispute! We need someone to look it up in the current routing tables to see where it's presently being routed to.

I also saw that very weird thing -- Brazil vs AFRINIC.

Help/insight from ASN? BGP? networking experts would be appreciated..! Thanks a lot

Re: Ask HN: How did my LastPass master password get leaked?

#75

Post by [deleted] »

ComputerGuru wrote: post #7

Because LastPass is beyond stupid and uses your master password to log in to their bbulletin or whatever php forum. That’s what got me to write and publish this: https://neosmart.net/blog/2017/a-free-lastpass-to-1password-... EDIT: "or whatever" means I couldn't remember the name of the php forum notorious for its insecurity, I thought it was something like 'bbulletin'. It was phpBB.

[deleted]

Re: Ask HN: How did my LastPass master password get leaked?

#76

Post by jacquesm »

gregsadetsky wrote: post #31
PanopticonMan wrote: post #21

Just checking the absolutely obvious, because I had a similar thing ... and then it turned out I had my VPN on. Thought I'd double check, in case someone was a silly as I am.

Thanks -- the original login attempt wasn't mine, so yeah. Not in this case.

That's too bad because that would have been a nice way to end this. Much good luck figuring this out, until further notice I would assume that anything that was in there is compromised so you better change your passwords.

Re: Ask HN: How did my LastPass master password get leaked?

#77

Post by petarb »

studiecomput wrote: post #10
RKearney wrote: post #4

Since your master password is stored in another password manager, would it be accurate to say you copy/paste it into LastPass? If so, something running on your machine could be scraping your clipboard. This of course assumes that it wasn’t really you from an IP that was just misidentified as being from Brazil. For what it’s worth, I stopped using LastPass after they sold out to LogMeIn and would recommend others stop…

Why do you recommend others to stop using LastPass?

LastPass has suffered a few security breaches and the overall quality of the product hasn’t improved. 1Password is a superior product with no security breaches.

Re: Ask HN: How did my LastPass master password get leaked?

#78

Post by ChrisMarshallNY »

whatsapps2020 wrote: post #50
ChrisMarshallNY wrote: post #45

Earlier quoted context omitted.

I remember reading a blog entry, a few years ago. Someone received a phishing email from "their bank." They responded to the email, and got someone on the horn, immediately. But their bank (the real one), sent them to a horrifying voice jail. The point was that the crooks gave better customer service than the real bank.

It makes sense economically. Crooks will steal ~100% of your bank balance in one day. Bank itself earns 1-2% per year.

Yup. The blogger was just being cranky about their bank.

Re: Ask HN: How did my LastPass master password get leaked?

#79

Post by dogman123 »

gregsadetsky wrote: post #69
dogman123 wrote: post #66

Earlier quoted context omitted.

just checked my email. last pass account was created in 2015, not sure if the current leaked password has been in use that whole time, but it has definitely been quite a few years. moved over to 1passward in march of this year and likely have not used last pass at all since.

That's really so strange. What is the probability that you, techknight (the other user in this thread) and me used the exact same compromised software back in ~2017 and had our master passwords stolen then? And for that person/bot (in Brazil) to try all of those master passwords now? It's beginning to look like this is a LastPass issue, no..?

it certainly does look like a lastpass issue....

Re: Ask HN: How did my LastPass master password get leaked?

#80

Post by cosmojg »

gregsadetsky wrote: post #57
dogman123 wrote: post #55

Earlier quoted context omitted.

not sure, but this seems pretty bad! fwiw, i haven't used lastpass in at least a year. i've been using 1password.

How old approximately was your account? I used my master password the last time in 2017... were our master passwords compromised back then... and someone held on to them for that long? That seems improbable?

What browser extensions do you have installed?
Post reply on HN