3 ms·
> I think with LastPass the problem was more the aggregate of many things, a sort-of death by a million cuts. That's true. > Because truthfully, the PBKDF2 it
by tablespoon 4y ago
> I think with LastPass the problem was more the aggregate of many things, a sort-of death by a million cuts.
That's true.
> Because truthfully, the PBKDF2 iterations count issue was relatively unimportant.
IIRC, some people's LastPass vaults were set to use a very old default of a single PBKDF2 iteration, which I understand is basically nothing, nowadays.
- jerf 4y agoAs of three weeks ago, mine was set to 500, so I can confirm that low, at least. Plenty of master password changes in the past several years, so plenty of opportunities for it to have been automatically set higher. The only reason I hadn't set it higher myself is I didn't know it was a setting at all.