Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How did my LastPass master password get leaked?

news.ycombinator.com

Post reply on HN
Print view View original

471–480 of 529 posts

Re: Ask HN: How did my LastPass master password get leaked?

#471

Post by ckue »

trajcek wrote: post #194

Just happened to me one hour ago and got scared shitless. Time Monday, December 27, 2021 at 3:50 PM EST Location UNITED STATES IP address 107.173.195.83 Actions taken, in this order: - Head to *Advanced Options* -> *View account history* to see if anything suspicious is going on (nothing so far) - Disable Lastpass MFA and use Google Authenticator (Authy) - *Account Settings* -> click on *Show Advanced Settings* -> *D…

For me it happened a couple weeks earlier:

> Time Tuesday, December 7, 2021 at 11:12 AM EST

> Location Ottawa, KS 66067, UNITED STATES

> IP address 208.114.93.34

Re: Ask HN: How did my LastPass master password get leaked?

#472

Post by 40four »

40four wrote: post #444
4rb1t wrote: post #222

Earlier quoted context omitted.

why not just use dropbox? and secure dropbox using 2FA? FWIW, I used to run nextcloud on a ec2 instance. Decided to just use dropbox instead. the webdav support on nextcloud was neat with keepass

My whole point was I like to be in total control my password database, and never have to decide whether to trust a third party provider or not. Not saying Dropbox or lastpass isn’t trustworthy. Just that it’s a point of failure you can eliminate, if the lack of convenience isn’t a huge deal to you.

I might take that back :) currently trending on the front page, a real article about Lastpass master passwords being compromised. https://news.ycombinator.com/item?id=29716715

So yeah, take Lastpass off the list, I don’t trust them :)

Re: Ask HN: How did my LastPass master password get leaked?

#473

Post by eksployted »

sillysaurusx wrote: post #328
Fnoord wrote: post #284

Earlier quoted context omitted.

Great post, seriously. How many extensions are you using again? :-)

Hmm. Tabist, Twitch Now, EditThisCookie, TooManyTabs, ublock, adblock, tampermonkey, disable Reddit CSS, FreshStart, Notion, Netflix auto-skip, gist from website, Auto Kill Sticky... and a couple I don’t recognize. I’ll post a full list when I’m back at a laptop. “Too many” :)

The only ones I have that match up there are EditThisCookie and ublock (origin)

EditThisCookie was last updated November 22, 2020, so it doesn't seem likely from that.

ublock origin was updated December 2, 2021, but they haven't changed devs or anything that would make me suspicious.

Re: Ask HN: How did my LastPass master password get leaked?

#475

Post by scottm01 »

Adding to the chorus. I used LastPass until 2018. I received a similar email from LastPass (and had forgotten that I never got around to actually deleting the account after I migrated).

My master password was a long multi word phrase with numbers and special characters, and was not used for anything except LastPass. I find their claims of credential stuffing suspect.

Edit -- Also had MFA enabled and received the email in November.

Re: Ask HN: How did my LastPass master password get leaked?

#476

Post by theunquietone »

Just happened to me a few hours ago. Completely random password only written down in a notebook locked in my safe.

- - - - - -

Login attempt blocked Hello,

Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look.

Was this you?

Account Time Tuesday, December 28, 2021 at 7:33 AM EST Location UNITED STATES IP address 163.198.130.161

Re: Ask HN: How did my LastPass master password get leaked?

#477

Post by theunquietone »

theunquietone wrote: post #476

Just happened to me a few hours ago. Completely random password only written down in a notebook locked in my safe. - - - - - - Login attempt blocked Hello, Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look. Was this you? Account Time Tuesday, December 28, 2021 at 7:33 AM EST Location U…

Also haven't used the account in years so that's even more odd.

Re: Ask HN: How did my LastPass master password get leaked?

#478

Post by gregsadetsky »

scottm01 wrote: post #475

Adding to the chorus. I used LastPass until 2018. I received a similar email from LastPass (and had forgotten that I never got around to actually deleting the account after I migrated). My master password was a long multi word phrase with numbers and special characters, and was not used for anything except LastPass. I find their claims of credential stuffing suspect. Edit -- Also had MFA enabled and received the emai…

Hey, could you please confirm whether you have uBlock origin installed in the following thread? https://news.ycombinator.com/item?id=29719033

It's not the most scientifically accurate method, but a few people and I are trying to rule out / determine which software in common all of us might have. Thanks!

Re: Ask HN: How did my LastPass master password get leaked?

#479

Post by gregsadetsky »

trajcek wrote: post #194

Just happened to me one hour ago and got scared shitless. Time Monday, December 27, 2021 at 3:50 PM EST Location UNITED STATES IP address 107.173.195.83 Actions taken, in this order: - Head to *Advanced Options* -> *View account history* to see if anything suspicious is going on (nothing so far) - Disable Lastpass MFA and use Google Authenticator (Authy) - *Account Settings* -> click on *Show Advanced Settings* -> *D…

Hey, could you please confirm whether you have uBlock origin installed in the following thread? https://news.ycombinator.com/item?id=29719033

It's not the most scientifically accurate method, but a few people and I are trying to rule out / determine which software in common all of us might have. Thanks!

Re: Ask HN: How did my LastPass master password get leaked?

#480

Post by gregsadetsky »

dogman123 wrote: post #39

Hey, this _just_ happened to me too....my password would be near impossible to guess and is not used elsewhere... Just deleted my last pass account! here's the info that came with the email Time Monday, December 27, 2021 at 1:41 PM EST Location São Paulo, SP 01323, BRAZIL IP address 160.116.88.235

Hey, could you please confirm whether you have uBlock origin installed in the following thread? https://news.ycombinator.com/item?id=29719033

It's not the most scientifically accurate method, but a few people and I are trying to rule out / determine which software in common all of us might have. Thanks!

Post reply on HN