2 ms·

Hackers stole... Often when these things happen, the reports make it sound like some amazing feat of technical engineering. But... > LastPass CEO Karim Toubba

by mekoka 4y ago

Hackers stole... Often when these things happen, the reports make it sound like some amazing feat of technical engineering. But... > LastPass CEO Karim Toubba said the intruders took a copy of a backup of customer vault data by using cloud storage keys stolen from a LastPass employee. Ah, there you have it, the good ol' careless human vulnerability! I understand such breaches from ordinary companies, with employees roaming around coffee shops with their work laptops full of these keys, nicely shielded from the world with unbreakable secrets like "Password1", but I'm baffled that security focused ones would also be caught with their pants down like this. Keys stolen from an employee? How? Were they mugged? Why didn't they think this was a possibility? Their entire business revolves around them being ten times as paranoid about this sort of things as the rest of us.

kbos87 4y ago
I think you are getting at something important here - at the absolute least, LastPass really owes its users a lot more detail on how this happened and what they are doing to prevent it from happening again in the future. Every other bit of security hyperbole they (and, to be fair, every other vendor in this space) pushes should be taken with a grain of salt until they are willing to go past the same boilerplate answer I’d expect from anyone else.