LastPass users warned their master passwords are compromised
bleepingcomputer.com
LastPass users warned their master passwords are compromised
1–10 of 326 posts
Re: LastPass users warned their master passwords are compromised
#2related: Ask HN: How did my LastPass master password get leaked? https://news.ycombinator.com/item?id=29705957
Re: LastPass users warned their master passwords are compromised
#3Let this be your Last non-selfhosted Pass solution.
Re: LastPass users warned their master passwords are compromised
#4LastPass's statement via HowToGeek: https://www.howtogeek.com/776450/lastpass-says-it-didnt-leak...
Re: LastPass users warned their master passwords are compromised
#5related: Ask HN: How did my LastPass master password get leaked? https://news.ycombinator.com/item?id=29705957
all the speculation in that thread about how the password could have been leaked reminded me of a post earlier this year that drastically changed my view on password managers. (also generated a lot of discussion here)
Re: LastPass users warned their master passwords are compromised
#6obligatory: I use passwordstore.org by Jason A. Donenfeld and its local, relatively easy to use, works with git, and free. Too niche for hackers to take interest I hope.
Re: LastPass users warned their master passwords are compromised
#7> Some customers have also reported changing their master passwords since they received the login warning, only to receive another alert after the password was changed.
Must be a compromised browser extension at this point.
> To make things even worse, customers who tried disabling and deleting their LastPass accounts after receiving these warnings also report [1, 2] receiving "Something went wrong: A" errors after clicking the "Delete" button.
Is there anything more infuriating than this type of error message?
Re: LastPass users warned their master passwords are compromised
#8Let this be your Last non-selfhosted Pass solution.
Self hosting sucks for an average user, and terrible for a mobile user. It is possible to have hosted password solution that is secure, so why not use it?
This is basically the same "cloud" vs "on-prem" debate. Cloud won, I think.
Re: LastPass users warned their master passwords are compromised
#9Re: LastPass users warned their master passwords are compromised
#10> Some customers have also reported changing their master passwords since they received the login warning, only to receive another alert after the password was changed. Must be a compromised browser extension at this point. > To make things even worse, customers who tried disabling and deleting their LastPass accounts after receiving these warnings also report [1, 2] receiving "Something went wrong: A" errors after c…
Ones which say "something went wrong" with a "funny" gif of someone scratching his head?