LastPass Security Notice
blog.lastpass.com
LastPass Security Notice
1–10 of 311 posts
Re: LastPass Security Notice
#2Title should be edited to be more specific:
"[W]e have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed. The investigation has shown, however, that LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised."
So, a breach of LastPass itself but not a breach of its users' non-LastPass per-website passwords/data.
Re: LastPass Security Notice
#3Oh great, just the day before yesterday I finally jumped to LastPass (because obviously WinKee is not compatible to my new Lumia phone), using my best password (long, no real syllables, memorized).
It sounds like the password is still safe enough, but it's a very unfortunate, inconvenient timing indeed.
Re: LastPass Security Notice
#4"Service as a software substitute"
http://www.gnu.org/philosophy/who-does-that-server-really-se...
Re: LastPass Security Notice
#5I don't use LastPass, but one thing that impresses me about their blog post: they didn't hide behind "your passwords are hashed" or something equally weaselly, but instead said exactly and clearly how passwords are hashed. Every online company should take note.
Re: LastPass Security Notice
#6I've always had the feeling that LastPass was held together by sticks and duct tape, especially the frontend.
Re: LastPass Security Notice
#7I don't use LastPass, but one thing that impresses me about their blog post: they didn't hide behind "your passwords are hashed" or something equally weaselly, but instead said exactly and clearly how passwords are hashed. Every online company should take note.
Yeah people really need to take the time to read this before everyone freaks out and shouts, LastPass is broken switch to service today before you are pwnd by hackers!
It really is a great post and they always have action items for their users to protect their security. I have really enjoyed using them and will continue to do so.
Re: LastPass Security Notice
#8I've always had the feeling that LastPass was held together by sticks and duct tape, especially the frontend.
Behind the scenes, most software is.
Re: LastPass Security Notice
#9Oh great, just the day before yesterday I finally jumped to LastPass (because obviously WinKee is not compatible to my new Lumia phone), using my best password (long, no real syllables, memorized). It sounds like the password is still safe enough, but it's a very unfortunate, inconvenient timing indeed.
Try 1Password.
Re: LastPass Security Notice
#10Thoughts on LastPass vs 1Password?