Live data from Hacker News

LastPass installs malware?

news.ycombinator.com

11–18 of 18 posts

Re: LastPass installs malware?

#11
I have been using it for the last couple of years now and have never had any sort of issue like you are describing. Maybe the site has been injected with something or your friends invite was malicious?

Re: LastPass installs malware?

#14
post #11

I have been using it for the last couple of years now and have never had any sort of issue like you are describing. Maybe the site has been injected with something or your friends invite was malicious?

I've verified the invite was all lastpass.com.

Re: LastPass installs malware?

#16
I can confidently say that this was not from the LastPass install -- we would never include malware (our reputation is based on trust built up over many years, this would shatter it).

The md5 of our download is 0290ce268f6e57b1ce26bb21748b12eb, it was last updated on Mar 4.

It most likely came from a different source.

Re: LastPass installs malware?

#17

I can confidently say that this was not from the LastPass install -- we would never include malware (our reputation is based on trust built up over many years, this would shatter it). The md5 of our download is 0290ce268f6e57b1ce26bb21748b12eb, it was last updated on Mar 4. It most likely came from a different source.

I absolutely agree - a reputation is easily shattered, which is why it seems incredulous that you guys were actually knowingly behind this.

Like I said, however - the issues disappeared upon uninstallation of the lastpass browser extension pack for OSX, and it certainly seemed to appear on its installation.

For everyone's sake, let's all hope I was idiotic at some prior point and somehow had a different drive-by install...

Re: LastPass installs malware?

#18
OP here.

The only thing that I can come up with is that I happened across a malicious page that did a drive-by install of some malware that magically disappeared upon browser restart (which both the lastpass installer and uninstaller force in order to get their extensions registered).

At least, that's what I'm hoping, or I've still got malware on my system!

Post reply on HN