3 ms·
That speculation is in direct contradiction with everyone here who claimed their much more recent passwords had also been compromised.
by foxfluff 5y ago
That speculation is in direct contradiction with everyone here who claimed their much more recent passwords had also been compromised.
- cout 5y agoNot necessarily. The 5 year old master password could have granted access to a service that made it possible to intercept the password change.
- foxfluff 5y agoThis was also happening to accounts that did not exist 5 years ago.
- robbedpeter 5y agoIt might be that the previous leak completely or partially exposed the algorithm of LastPass's password generator, or some other commonly used tool, and people being targeted show up on other lists. Credential stuffing with a targeted list of generated passwords. If passwords from other breaches fit the characteristics of a weak or compromised generator, that could also be used for targeting.