3 ms·
I still think it's maddening that LastPass's website says that the vault is encrypted, yet in reality that wasn't and may still not be the case, where aspects o
by NoPicklez 4y ago
I still think it's maddening that LastPass's website says that the vault is encrypted, yet in reality that wasn't and may still not be the case, where aspects of the vault as we now know aren't encrypted.
Unless I'm missing something, to me that is one of the biggest failures. It is even laid out in their technical and organizational measures document.
- mtlmtlmtlmtl 4y agoSoftware companies should really be held more accountable for outright lies like this. It's a very widespread practice.
- NoPicklez 4y ago100% They tout on their website that they get third party assurance testing done and yet none of it matters if we can’t see the actual reports. I just can’t believe more people aren’t enraged about it. Or that people aren’t seeking to sue, purely based on that. Zero trust architecture is fine if you’re breached that’s the whole point, but saying that the information within the vault is encrypted when parts of it aren’t is downright malicious.
- neuronic 4y agoAgreed, in fact LastPass should be heavily fined for this and be forced to go out of business if things don't provably change within a reasonable timeframe.