4 ms·
Same functionality as http://leakedin.org/ http://leakedin.org/ ? http://news.ycombinator.com/item?id=4075347 http://news.ycombinator.com/item?id=4075347
by 51Cards 14y ago
Same functionality as http://leakedin.org/ http://leakedin.org/ ?
http://news.ycombinator.com/item?id=4075347 http://news.ycombinator.com/item?id=4075347
- jcdavis 14y agoFor starters, lastpass is using https, which is definitely better
- shawabawa 14y agoNot really. It's only sending the hash of your password, not your password in plaintext. Although the hashes don't seem to be salted...
- pwman 14y agohttps, we're not using 'GET' parameters for the hash (which is almost certainly ending up in log files on leakedin's site). We also just came out with a version for eHarmony's breach: https://lastpass.com/eharmony/ https://lastpass.com/eharmony/