3 ms·

Not lying, but definitely downplaying past incidents [0], of which they have had a number. [0] https://en.wikipedia.org/wiki/LastPass#Security_issues https://e

• tgsovlerkhgsel 5y ago
  Oh, that leads to an interesting possibility: Yet another vulnerability in their extension, allowing a malicious web site to access the master password. This could be very hard to trace since users would have to notice the correlation between visiting a certain web site (or e.g. one of many compromised sites) and getting hacked. Worse, combined with malvertising, it could be exploited from almost any web site if the user doesn't block ads.