4 ms·
What happens to the serial security recidivists? Where are the regulators? LastPass has had security incident after security incident, how are they still allowe
by seanieb 4y ago
What happens to the serial security recidivists? Where are the regulators? LastPass has had security incident after security incident, how are they still allowed to operate?
- Alifatisk 4y agoThey failed to secure sensitive user credentials, that must’ve broken some law. Also, people can store notes on lastpass, did those get leaked too?
- HPsquared 4y agoWould this sort of thing fall under GDPR?
- Alifatisk 4y agoAnd probably CCPA in that case?
- poglet 4y agoYes "that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data." https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/ https://blog.lastpass.com/2022/12/notice-of-recent-security-...
- Alifatisk 4y agoI would not be surprised if such sensitive details could ruin someones life, and that is now in hands of a bad actor.
- briffle 4y agoI think at this point, they need to get purchased by Experian, so they can combine into such an ugly mess of problems, that identity laws get overhauled.
- arbitrage 4y agoWhat regulation? Nobody will ever prosecute them.