3 ms·
> a malicious party installed a keylogger onto a senior engineer's home computer through an exploit in Plex, the personal cloud service for movie storage and st
by charles_f 4y ago
> a malicious party installed a keylogger onto a senior engineer's home computer through an exploit in Plex, the personal cloud service for movie storage and streaming, and was able to break into corporate-level caches as a result
> "For reference, the version that addressed this exploit was roughly 75 versions ago," a LastPass spokesperson said.
Irrelevant, what's relevant is how come LastPass employees can access sensitive customer information on their production from a personal laptop
- lorenzo95 4y agoYes, this is the problem. This is a decision plex inc. made when deciding their business risk appetite. If your company hasn't threat modeled working from home at this point, there is not much you can do to help. Due diligence and due care have failed you.
- dixie_land 4y agoalso why would you ever _want_ to access work from a personal computer to begin with
- Pxtl 4y agoBecause you've a comfy desktop setup with more screens than the average laptop can support and multi-monitor KVM setups are tricky? With enough 2FA and a thin-client approach to the user's machine it seems pretty safe. Even if an attacker gets passwords through a keylogger, the 2FA will detect and block attacks.
- runamok 4y agoEspecially if you work for such a juicy target. Shows incredibly bad judgement by everybody.