replaceusb

4 ms·

1.
by replaceusb 3y ago
Hollow words coming from Mozilla. They push this rhetoric with one hand, while the other plunges deeper into the monetized analytics hole.
2.
by replaceusb 3y ago
All of those have been non issues and I have been daily driving linux for several years now. The only few things I do from terminal is updates, because I do not want to load application icons from the update manager. My bandwidth is metered
3.
by replaceusb 4y ago
Pretty much, limiting mfa options to otp only. Then the attacker getting access to customer shared secrets means they basically just have to guess the master password. >Backup of LastPass MFA/Federation Database – contained copies o
4.
by replaceusb 4y ago
It did, AWS alerted them on the traffic. It reads like they ignored it and when investigators later started going over that data it jumped up and slapped them.
5.
by replaceusb 4y ago
Seems like a lot of their talk of zero knowledge was bs. >In December, we notified a subset of customers whose SCIM, Enterprise API, and SAML keys were stored in unencrypted form. This only affected customers who joined LastPass and used
6.
by replaceusb 4y ago
https://pberba.github.io/security/2020/05/28/lastpass-phishi... From what I can tell, all of lastpass mfa options are based around some form of otp not webauthn. We tested the above in our own environmen
7.
by replaceusb 4y ago
I am confused as to why there is a hard requirement tied to apple,google,ms accounts. I get that its so they can sync to other devices but what if I do not want them syncing?