4 ms·
I did anticipate this... BUT and this is a big BUT... I didn't expect ANY of my stuff to be unencrypted! They keep saying that THEY CAN NOT read ANYTHING in my
by blakesterz 4y ago
I did anticipate this... BUT and this is a big BUT... I didn't expect ANY of my stuff to be unencrypted! They keep saying that THEY CAN NOT read ANYTHING in my vault. Now the update says some of my stuff wasn't encrypted. This is way beyond acceptable. I know URLs aren't the worst thing in the world to expose. But the fact that ANY part of my vault is open is wrong.
- nixgeek 4y agoIf you can find the LastPass equivalent to 1Password’s detail on the vaults and their security white paper [1] then I would love to take a look! [1] https://support.1password.com/cs/opvault-design/ https://support.1password.com/cs/opvault-design/
- wlonkly 4y agoI found a third-party description[1], which someone in another forum linked to as evidence that notes inside items are encrypted. None of the other unencrypted fields feel as high-value as the URL field, although some of them are clearly valuable, such as whether the password was autogenerated, whether or not there are attachments, and last password change timestamp, which is convenient for comparing against known breaches. That said, I have no information as to the veracity of that description, except that others seem to be using the library it belongs to. [1] https://github.com/cfbao/lastpass-vault-parser/blob/master/lastpass-vault-format.md#structures-of-some-types-of-composite-data-blocks https://github.com/cfbao/lastpass-vault-parser/blob/master/l...