Live data from Hacker News

Lastpass Security Incident

blog.lastpass.com

581–587 of 587 posts

Re: Lastpass Security Incident

#583

> We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its affiliate, GoTo. We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement. EXACTLY why so many companies opt to stay on-prem, to the amazement and bewilderment of every vendor sales rep that calls on the phone. Go ahead and ask t…

> Ask them which open-source libraries their SaaS uses. Ask them to show you the audits they've performed on THEIR supply chain this year. You won't get any answers. Well, even with private cloud and on-prem these are pretty relevant questions... I Worked with a government organization where I was part of the team on-boarding a new on-prem system. It was purchased through a tender, where on-prem was a requirement. Th…

Everybody does this.

And, to be fair, it's a large part of the Docker experience.

I recently had a pretty much identical experience with a vendor that is industry leading in their sector and counts most large companies among their customers. Just imagine what their cloud looks like.

A supply chain attack on these guys wouldn't even be difficult, and the only reason I can imagine we haven't heard about it is that we just haven't heard about it.

Re: Lastpass Security Incident

#584

Earlier quoted context omitted.

It's packed with enormous amount of bugs that make the day to day experience terrible. I want to move but I'm terrified of the export process

I moved to BitWarden a year ago after a billing problem with LastPass that their support handled badly. I haven't had any problems with the migrated data and I finally deleted my LastPass account last month.

As today I attempt to perform the migration, their export to CSV outputs a CSV with 2 lines of my 700+ passwords. The HTML in the page shows a lot of items, but if I save directly from there, it's poorly formatted, it won't import anywhere.

Re: Lastpass Security Incident

#586

Earlier quoted context omitted.

I've tried LastPass, 1password, and Bitwarden. Bitwarden has been my favorite as I can selfhost it if I want (open source fork with feature parity)

But do you self host it?

Yes, I do.
Post reply on HN