Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

krebsonsecurity.com

Post reply on HN
Print view View original

21–30 of 77 posts

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#21

Post by araes »

codetrotter wrote: post #8
lifeisstillgood wrote: post #4

>>> KrebsOnSecurity last month interviewed a victim who recently saw more than three million dollars worth of cryptocurrency siphoned from his account. That user signed up with LastPass nearly a decade ago, stored their cryptocurrency seed phrase there, and yet never changed his master password — which was just eight characters. Nor was he ever forced to improve his master password. This does fascinate me. How many p…

The more early someone was in mining or buying Bitcoin, the greater the possibility that they believe in Bitcoin in and of itself. I.e. to someone who was early into Bitcoin, they might wish to never sell off all of their BTC. And besides, even if you wanted to sell off your Bitcoins, there are a number of things to consider: - Taxes. Why sell millions of USD worth of Bitcoin now, and pay taxes on all of it today? Po…

This is a classic issue with money. What do you do if you're Taylor Swift? You're a 750 millionaire, with the next couple 100 on the way from this tour.

Whelp, spent the first 50 on a house all humans will drool over. Got the compulsory car. Got the compulsory jet. Got the compulsory yacht (not quite as large as Bezos' (ehmm, banana?) that could not leave its construction port). [1]

And with the other 600 million? Private air force? [2] Air craft carrier for your private air force? Or you end up like every wealthy human, dumping your money into real estate so that you can buy 1000 houses for every normal human, and completely "disrupt" the housing market.

[1] https://en.wikipedia.org/wiki/Koru_(yacht)#Koru_and_De_Hef

[2] https://www.thedrive.com/the-war-zone/32869/this-man-owns-th...

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#22

Post by Retric »

DennisP wrote: post #19
reverius42 wrote: post #16

Earlier quoted context omitted.

Isn’t the market cap of, say, Bitcoin high enough that selling a few mil USD worth shouldn’t really impact it? But maybe the trading volume is too low.

Nope, daily Bitcoin volume on Coinbase alone is over $200 million. Nobody cares if you sell 1% of that, at worst the price dips momentarily.

It’s hard to say how much of that are “real” trades, bots can have minimal liquidity but a huge trading volume.

Satoshi is in theory holding onto ~25 billion in coins. Trying to cash that out would however absolutely tank the current valuations.

But that’s hardly the only major risk. Bulgaria has something like 213,000 bitcoin worth nominally 5 billion or so and no particular interest in bitcoin, but trying to cash that out is again problematic.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#23

Post by peter422 »

As somebody that has been using lastpass for many years and continues to do so… I just do not understand how people who pick weak master passwords complain about this.

The lastpass documentation makes clear over and over that your entire DB can be compromised but as long as they don’t have the master password, you are safe. How people do not think one step past this and realize they need a very secure master password is beyond me.

And yes I know there will be a host of comments telling me they are in the password business so they need better something and guides and whatever, fine. But for anybody with the slightest bit of common sense, lastpass was and still is secure and lived up to their promise.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#25

Post by wglb »

handsclean wrote: post #5

The first paragraph very nearly lost me – irrational, rage bait, directly contradicts later stated facts – but there’s some good content later. The chief complaint seems to be that LastPass is not forcing this upgrade, they are just blast emailing unaffected people that they “forced” it while not actually doing so. And they’ve pulled similar stunts in the past, and in current communication seem to clearly be blaming…

Friends don't let friends use LastPass.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#26

Post by ThrowawayTestr »

autoexec wrote: post #14
handsclean wrote: post #5

The first paragraph very nearly lost me – irrational, rage bait, directly contradicts later stated facts – but there’s some good content later. The chief complaint seems to be that LastPass is not forcing this upgrade, they are just blast emailing unaffected people that they “forced” it while not actually doing so. And they’ve pulled similar stunts in the past, and in current communication seem to clearly be blaming…

> Everybody with a clue knows LastPass is a lost cause, Yeah at this point, I have to wonder how there are still lastpass users to worry about whatever the latest lastpass scandal is.

I'm too lazy to change.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#27

Post by plorkyeran »

lifeisstillgood wrote: post #4

>>> KrebsOnSecurity last month interviewed a victim who recently saw more than three million dollars worth of cryptocurrency siphoned from his account. That user signed up with LastPass nearly a decade ago, stored their cryptocurrency seed phrase there, and yet never changed his master password — which was just eight characters. Nor was he ever forced to improve his master password. This does fascinate me. How many p…

I "won" the crypto lottery and got a 100x return... which means that I sold many years before the peak and made $2000. There's people who timed things much better than I did, but if you'd held on past a 10,000x you're probably going to keep holding.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#28

Post by userbinator »

codetrotter wrote: post #8
lifeisstillgood wrote: post #4

>>> KrebsOnSecurity last month interviewed a victim who recently saw more than three million dollars worth of cryptocurrency siphoned from his account. That user signed up with LastPass nearly a decade ago, stored their cryptocurrency seed phrase there, and yet never changed his master password — which was just eight characters. Nor was he ever forced to improve his master password. This does fascinate me. How many p…

The more early someone was in mining or buying Bitcoin, the greater the possibility that they believe in Bitcoin in and of itself. I.e. to someone who was early into Bitcoin, they might wish to never sell off all of their BTC. And besides, even if you wanted to sell off your Bitcoins, there are a number of things to consider: - Taxes. Why sell millions of USD worth of Bitcoin now, and pay taxes on all of it today? Po…

I wonder how many people heard of Bitcoin very early in its creation, mined a few "just for fun", and then forgot about them or even deleted them when they thought it wouldn't amount to anything.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#29

Post by kstrauser »

ThrowawayTestr wrote: post #26
autoexec wrote: post #14

Earlier quoted context omitted.

> Everybody with a clue knows LastPass is a lost cause, Yeah at this point, I have to wonder how there are still lastpass users to worry about whatever the latest lastpass scandal is.

I'm too lazy to change.

Take the 10 minutes to migrate to Bitwarden or 1Password or such and be done with it.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#30

Post by meristohm »

araes wrote: post #21
codetrotter wrote: post #8

Earlier quoted context omitted.

The more early someone was in mining or buying Bitcoin, the greater the possibility that they believe in Bitcoin in and of itself. I.e. to someone who was early into Bitcoin, they might wish to never sell off all of their BTC. And besides, even if you wanted to sell off your Bitcoins, there are a number of things to consider: - Taxes. Why sell millions of USD worth of Bitcoin now, and pay taxes on all of it today? Po…

This is a classic issue with money. What do you do if you're Taylor Swift? You're a 750 millionaire, with the next couple 100 on the way from this tour. Whelp, spent the first 50 on a house all humans will drool over. Got the compulsory car. Got the compulsory jet. Got the compulsory yacht (not quite as large as Bezos' (ehmm, banana?) that could not leave its construction port). [1] And with the other 600 million? Pr…

There's a risk of "dragon sickness" (from The Hobbit) and conflating one's self-worth with their financial value; I feel for these folks, and support regulation that would make it increasingly difficult to amass money beyond a certain point (basic needs being well met and all that), along with psychological help (not in a pejorative way- I am a beneficiary of therapy and medication and I don't feel lesser for it).
Post reply on HN