4 ms·
> Following the incident, LastPass has taken a number of steps to prevent future attacks and investigate what happened. The engineer was assisted in strengtheni
by ccooffee 4y ago
> Following the incident, LastPass has taken a number of steps to prevent future attacks and investigate what happened. The engineer was assisted in strengthening the security of their personal network [...]
I hope this involved something along the lines of: "This zoom meeting won't end until you update your router firmware".
- akerl_ 4y agoI'm fascinated that this was part of their remediation. I'd consider "don't trust the employee's local network" to be a pretty basic principle of modern corporate information security. What happens when an employee logs in from hotel wifi? You basically have to treat the network between the user and your environment as hostile, and design for that problem.
- userbinator 4y agoAnd as an employee, "don't trust the company's local network" with your own devices either.
- akerl_ 4y agoFor my personal devices, I trust my company's local network essentially the same as any other network my mobile devices connect to.