5 ms·
LastPass owner GoTo has been hacked
- voganmother42 4y agoLastpass announcement: https://blog.lastpass.com/2022/11/notice-of-recent-security-incident/ https://blog.lastpass.com/2022/11/notice-of-recent-security-...
- CaliforniaKarl 4y agoAh, thank you! This is much more informative.
- dang 4y agoYes - we've moved the comments to https://news.ycombinator.com/item?id=33806803 https://news.ycombinator.com/item?id=33806803, which was posted earlier and has that article.
- hendry 4y agoThought GoTo was Indonesia’s GoJek & Tokopedia, though it would appear not.
- jrm4 4y agoI'll keep saying it: third-party passwords are worse than most any other solution, and will continue to be so without liability/indemnification. The fact that they appear to work now doesn't take into account the "Black Swan"-ish nature of a big hack. The huge disaster (of getting everybody, as opposed to one person) is potentially ALWAYS around the corner. What's that about three people keeping a secret?
- mumin 4y agoIt's not three people keeping a secret though. Lastpass uses encrypted blobs so unless someone also crack 256-bit AES it's really not that big of a deal. Perhaps locally stored secrets dbs are better, but generally using LastPass-esque services is much better than trying to memorize a bunch of passwords.