3 ms·
The impact of their attacks has more been a strong motivation to "get my house in order". I'd been using LastPass for some time but decided that I should get th
by mentat 15y ago
The impact of their attacks has more been a strong motivation to "get my house in order". I'd been using LastPass for some time but decided that I should get the YubiKey for two factor auth. I also started becoming quite a bit more vocal at work about the sorts of things it might be a good idea to take a closer look at. This is a wake up call for what's already happening. They just decided to do it and tell the public instead of sitting, waiting, and letting people continue to feel safe. If there's danger and it's at your doorstep, it's good to feel not safe.
- nextparadigms 15y agoWasn't LastPass hacked earlier this year?
- mentat 15y agoThey saw some things they believed might be brute force attacks against weak passwords, so they reset the passwords of people who the attempts had been directed against. They also changed they way they handled repeated password failures to be even more strick. The basic database was not compromised and the passwords in the database are encrypted with the master password for the account so they'd have to be broken account by account.
- 7c8011dda3f3b 15y agoAdditional information can be found here: http://blog.lastpass.com/2011/05/lastpass-security-notification.html http://blog.lastpass.com/2011/05/lastpass-security-notificat...
- marchdown 15y agoIsn't YubiKey a fail-closed mechanism? Are you okay with trading a little extra protection from voyers with the possibility of losing access to the portion of your personal data that you deemed important enough to encrypt and vital enough still keep around as opposed to wiping it clean?