Which is why it's strange to hear Steve Gibson so breathlessly defending LastPass, claiming secrets aren't really at risk. It's like he read some white papers,

Which is why it's strange to hear Steve Gibson so breathlessly defending LastPass, claiming secrets aren't really at risk. It's like he read some white papers, met some LP employees, and decided it's unhackable. Consider that many users may have had very guessable vault passwords, and encryption generally gets weaker as hardware and techniques advance.