3 ms·
Among other things, they apparently use webpage encryption (their technology page indicates that AES is implemented in JavaScript for their website), which mean
by zeveb 9y ago
Among other things, they apparently use webpage encryption (their technology page indicates that AES is implemented in JavaScript for their website), which means that they have the ability to target any user at any point in time.
Also, they're proprietary software. Password security is too important to entrust to proprietary software.
- pythonaut_16 9y agoWhen talking about Password Managers (and security in general), I think it's important to keep your threat model in mind. Is LastPass going to protect you against sophisticated State, or even potentially Corporate attackers? Maybe not. Will it protect you against random hacks and insecure sites better than just reusing the same password that you can remember? Yes. I generally agree though that this is an area where open source software is preferable. I'm also really intrigued by the work Keybase is doing and hope that it might spur some interesting solutions for web auth as well.
- gruez 9y ago>Is LastPass going to protect you against sophisticated State, or even potentially Corporate attackers? Maybe not. Will it protect you against random hacks and insecure sites better than just reusing the same password that you can remember? Yes. but using keepass does protect you in the case that lastpass' servers get compromised into serving malicious javascript.