4 ms·
Among their many failures, I am still shocked that the notes section for each password was not encrypted. All kinds of assumed-safe info will be in there from s
by sethammons 3y ago
Among their many failures, I am still shocked that the notes section for each password was not encrypted. All kinds of assumed-safe info will be in there from secret question answers to former passwords and account numbers. What fool of a project manager pushed for that?
- Operyl 3y ago> we need that extra 300msec of speed, Jim! Web metrics are all that matter!!!!11one
- peblos 3y agoI don’t recommend lastpass but notes were encrypted. This stemmed from an original miscommunication from a CS rep to a customer before it blew up but was later corrected. Independently verified because we can’t take Lastpass at their word: https://www.reddit.com/r/Lastpass/comments/zzz5x4/notes_are_encrypted/ https://www.reddit.com/r/Lastpass/comments/zzz5x4/notes_are_...
- SV_BubbleTime 3y agoThat was my understanding as well, but there were definitely unencrypted portions like URL. I assume for sharing purposes.
- peblos 3y agoYeah you’re right, URL was unencrypted along with some others. Doesn’t seem critical if we’re talking Facebook and twitter but becomes problematic with human rights orgs and the like. The justification was that it was used to match login fields against vault items. I’m no crypto expert but it seemed flimsy to me