It's probably worth noting, this exploit requires the user to save their master password locally. While it's not obvious from the blackhat blurb, it's stated b

It's probably worth noting, this exploit requires the user to save their master password locally. While it's not obvious from the blackhat blurb, it's stated by the author in their more detailed blog post [1] Additionally, this behavior is something that LastPass advises against: "Are you sure you want to have LastPass remember your password? This will significantly decrease the security of your LastPass account!" [1] http://www.martinvigo.com/a-look-into-lastpass/ http://www.martinvigo.com/a-look-into-lastpass/