LastPass requesting password reset after facing unknown anomaly

#1

Post by sathyabhat » Thu, May 05, 2011, 4:03 AM UTC

LastPass requesting password reset after facing unknown anomaly
blog.lastpass.com

Re: LastPass requesting password reset after facing unknown anomaly

#2

Post by twodayslate » Thu, May 05, 2011, 4:24 AM UTC

I am perfectly fine with them being paranoid. They should be. They are being paranoid for me. They are doing a good job protecting the user.

Re: LastPass requesting password reset after facing unknown anomaly

#3

Post by frio » Thu, May 05, 2011, 4:24 AM UTC

twodayslate wrote: post #2

I am perfectly fine with them being paranoid. They should be. They are being paranoid for me. They are doing a good job protecting the user.

I completely agree, but I'm not particularly happy about the apparent lack of detail in their logs/IDS system.

Re: LastPass requesting password reset after facing unknown anomaly

#4

Post by jonursenbach » Thu, May 05, 2011, 4:25 AM UTC

Not happy that I'm finding this out via a blog post and not an email.

Re: LastPass requesting password reset after facing unknown anomaly

#5

Post by sathyabhat » Thu, May 05, 2011, 4:30 AM UTC

jonursenbach wrote: post #4

Not happy that I'm finding this out via a blog post and not an email.

I found this out when trying to login to LastPass, was redirected to "re-enable your LastPass account" page https://lastpass.com/activate.php

Re: LastPass requesting password reset after facing unknown anomaly

#6

Post by mbreese » Thu, May 05, 2011, 4:34 AM UTC

I'm curious about why they have an Asterix server on the same network as their database... is there a voice authentication feature, or are we just talking about their office phones?

Either way, they seem to be taking this seriously, even if they are just being overly paranoid, I find it comforting.

Re: LastPass requesting password reset after facing unknown anomaly

#7

Post by 3dFlatLander » Thu, May 05, 2011, 4:53 AM UTC

sathyabhat wrote: post #5

jonursenbach wrote: post #4

Not happy that I'm finding this out via a blog post and not an email.

I found this out when trying to login to LastPass, was redirected to "re-enable your LastPass account" page https://lastpass.com/activate.php

I just tried logging out and back in a few times, nothing. Very weird.

Re: LastPass requesting password reset after facing unknown anomaly

#8

Post by willwagner » Thu, May 05, 2011, 5:04 AM UTC

3dFlatLander wrote: post #7

sathyabhat wrote: post #5

Earlier quoted context omitted.

I found this out when trying to login to LastPass, was redirected to "re-enable your LastPass account" page https://lastpass.com/activate.php

I just tried logging out and back in a few times, nothing. Very weird.

Same here. I changed my master password but I was never prompted to do so.

Re: LastPass requesting password reset after facing unknown anomaly

#9

Post by maguay » Thu, May 05, 2011, 5:09 AM UTC

Suddenly, I'm glad I switched to 1Password.

Re: LastPass requesting password reset after facing unknown anomaly

#10

Post by Jencha » Thu, May 05, 2011, 5:27 AM UTC

3dFlatLander wrote: post #7

sathyabhat wrote: post #5

Earlier quoted context omitted.

I found this out when trying to login to LastPass, was redirected to "re-enable your LastPass account" page https://lastpass.com/activate.php

I just tried logging out and back in a few times, nothing. Very weird.

"Joe Siegrist said... @SEV We're only forcing the issue right now you when we see you come from an IP you haven't used in the past few weeks (if you disable logging logins this might mean immediately)." http://blog.lastpass.com/2011/05/lastpass-security-notificat...