4 ms·
The vaults were accessed years ago
by mrhottakes 4mo ago
The vaults were accessed years ago
- insanitybit 4mo agoYes, in a separate breach.
- SV_BubbleTime 4mo ago>The vaults were accessed years ago > Yes, in a separate breech. Not nearly that cut and dry. Many, not all encrypted vaults leaked out. If you lost data it was because you used a weak master password for that vault.
- insanitybit 4mo agoMy point is the same - nothing about this breach implies vault access, it explicitly is related to the Klue breach, which contains some customer PII. > If you lost data it was because you used a weak master password for that vault. Even this is more complex (horrible pbkdf2 defaults, you're welcome for getting lastpass to increase them btw that was me) but it isn't relevant, no vaults are accessed in this breach.
- master-lincoln 4mo agoThe encrypted vaults, yes. Ideally they are worthless when the master password is sufficiently complex
- jazzyjackson 4mo agoiirc back then the vault wasn't encrypted as one blob, the domain name's belonging to each vault were revealed