3 ms·
I'd say mainly that you don't have to wait around for the user to go to the sites you are interested and look for passwords in a long string of keys.
by mordocai 11y ago
I'd say mainly that you don't have to wait around for the user to go to the sites you are interested and look for passwords in a long string of keys.
- superuser2 11y agoTrue, but this is sort of academic when we're talking about protecting secrets on an already compromised machine. I don't think this is a reason to not use LastPass.
- mordocai 11y agoAgreed. I use lastpass and don't plan on stopping unless something major (that isn't fixed quickly) comes out.
- slg 11y agoThere are some scenarios in which compromising a machine once is much easier. A lost device is one example. Installing a keylogger won't provide any value there, but if this exploit can recover the Lastpass master password and disable 2FA authentication (if enabled), then they will have access to the entire vault.