7 ms·
Whilst not good, this seems to be bad news for some GoTo products but not specifically Lastpass: > a threat actor exfiltrated encrypted backups from a third-p
by altacc 4y ago
Whilst not good, this seems to be bad news for some GoTo products but not specifically Lastpass:
> a threat actor exfiltrated encrypted backups from a third-party cloud storage service related to the following products: Central, Pro, join.me, Hamachi, and RemotelyAnywhere
Lastpass is a GoTo product, so in general the multiple security breaches undermine confidence in all their products. Your password manager is not something you want low confidence in.
- snehk 4y agoGoTo has been bad for a while. I recently sent their team a support ticket for their GoToWebinar API (API response contained completely different/wrong data). They said it's not that much of a problem and said they weren't gonna fix anything. Hilariously bad.
- lotsofpulp 4y agoI was under the impression LogMeIn (GoTo’s previous name) already was known as malware many years ago when they bought Lastpass. Lastpass was the first password manager I used, and when it sold to a scummy company like LogMeIn, I learned my lesson to just stick with KeepassXC.
- avhception 4y agoKeepassXC + unison is the best combo for me. I'll never let some cloud service lay their hands on my passwords.
- bogomipz 4y agoWhat does unison provide in this strategy. I remember the old Keepass, is KeepassXC the next generation in this?
- SCdF 4y ago> I remember the old Keepass, is KeepassXC the next generation in this? It's the same database format, KeepassXC is a fork of KeepassX with more active development. https://superuser.com/questions/878902/whats-the-difference-between-keepass-keepassx-keepassxc https://superuser.com/questions/878902/whats-the-difference-...
- that_guy_iain 4y agoIf that wrong data contained emails, etc. Then that would be a data breach and legally they need to fix, inform affected users, and report the data breach. If they said they weren't going to fix it, report it.
- Spooky23 4y agoThey were a red headed stepchild within the Citrix portfolio before they were carved up like a turkey. I wouldn’t expect anything positive from them going forward.
- manuelabeledo 4y agoI didn't realize that Lastpass was part of the same company who brought us GoToMeeting. It makes me wonder if this is all a result of GoTo general culture permeating into Lastpass. GoToMeeting and Webinar feel hilariously outdated, and I think that people use them mostly because corporate inertia.
- ubermonkey 4y agoWe are heavy users of GTM, and have been for over a decade. Initially, it was FAR AND AWAY the best and most reliable option for meetings. It worked well across platforms, and the screensharing -- especially the ability to see a participant's screen, not the host's screen -- was stellar. This was key for us; we're a small software company, so GTM sessions to help client IT install, or help a customer with a problem, or even get the system configured initially, were all our bread and butter. Sadly, GTM over time has fallen prey to the same thing that ails lots of older products: it just keeps getting worse, and it feels almost deliberate. We do not give two shits about video, but they're pushing it hard. Sharing controls change revision to revision, which makes it harder for us to coach customers on how to use the tool. Lag and delay has become a real issue. It's just super frustrating.
- imperialdrive 4y agoI'm on hold with lastpass enterprise support as I type because upon reviewing our account we found a super-admin that is 'blank', no text appears but it has been granted policy access to all shared folders. This is nuts. We use SSO so iirc the keys were 128bit x2 which was supposed to be completely unaffected by the dump. Perhaps not. Screenshot here: https://freeimage.host/i/H0RICCu https://freeimage.host/i/H0RICCu