Current Events > LastPass needs to go out of business...

Topic List
Page List: 1
Solid_Sonic
04/04/23 7:37:22 AM
#1:


No mincing words, the company needs to shut down.

https://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/amp/

I will admit I say this as someone who has yet to migrate from the PAID subscription they have to a more secure password platform...

---
Surely if I stick up for rich people on the Internet I'll eventually get a sweet job offer from them, right?
... Copied to Clipboard!
Sexypwnstar
04/04/23 7:43:16 AM
#2:


Who the fuck pays for a subscription when you got a notepad on your computer lmfao

---
http://i.imgur.com/Su4g5.jpg http://i.imgur.com/21DiJ.jpg
... Copied to Clipboard!
Lvaneede
04/04/23 7:49:31 AM
#3:


I cant access my account anymore. I seem to have changed my password at some point, probably after they said they got hacked, and now I cant work out what it is.

---
Fact: Nintendo is the best, there is no point denying it.
... Copied to Clipboard!
Chicken
04/04/23 8:24:17 AM
#4:


Sexypwnstar posted...
Who the fuck pays for a subscription when you got a notepad on your computer lmfao
do a lot of people put their passwords in a notepad file? I used to do it but I got paranoid.

---
May contain bones
https://youtu.be/jGbI0P4hh3o
... Copied to Clipboard!
bluezero
04/04/23 8:41:09 AM
#5:


Sexypwnstar posted...
Who the fuck pays for a subscription when you got a notepad on your computer lmfao
Sounds pretty secure.

---
i7-12700F - 3080 - 32GB 3200 - 1440p Ultrawide
... Copied to Clipboard!
Purple_Cheetah
04/04/23 8:47:39 AM
#6:


bluezero posted...
Sounds pretty secure.
Someone said they did that, but the thing is they had it buried within a game's readme or w/e file, deep in the bowels of a directory. That method at least makes some sense, but still iffy.

I know of someone that'd put it in a notepad and just take a picture of it on their phone. ... I... yeah, better not accidentally have your photos shared/unprivated.
... Copied to Clipboard!
CaptainStrong
04/04/23 9:23:48 AM
#7:


Why would anyone use a password manager that saves your passwords on the fucking Internet?
... Copied to Clipboard!
MabusIncarnate
04/04/23 9:26:53 AM
#8:


CaptainStrong posted...
Why would anyone use a password manager that saves your passwords on the fucking Internet?
It's always seemed like a very awful idea to me also

---
"They speak of progress, in red, white and blue. It's the structure of the future as demise comes seething through."
... Copied to Clipboard!
voldothegr8
04/04/23 9:42:54 AM
#9:


Sexypwnstar posted...
Who the fuck pays for a subscription when you got a notepad on your computer lmfao
Assuming this isn't a joke, having a document with all your passwords in plaintext sitting on a device connected to the internet is probably far less secure.

CaptainStrong posted...
Why would anyone use a password manager that saves your passwords on the fucking Internet?
For the convenience of being able to get your passwords anywhere you can get an internet connection. I can see why some people wouldn't get it, but when you manage shit that requires knowing tons of passwords the service is invaluable.

---
Oda break tracker 2022- 13 (3) | THE Ohio State:11-1 | Las Vegas Raiders: 6-9
... Copied to Clipboard!
BlazinBlue88
04/04/23 9:50:41 AM
#10:


CaptainStrong posted...
Why would anyone use a password manager that saves your passwords on the fucking Internet?
You clearly don't understand encryption. The company itself (employee or hacker) isn't able to see what your actual username/password information is. It's like giving them a locked safe to hold onto for safe keeping but not giving them the combination. That's the idea behind it anyway.

---
http://i.imgur.com/R15aJJ3.png http://i.imgur.com/NJqp6LS.png
... Copied to Clipboard!
CaptainStrong
04/04/23 10:19:12 AM
#11:


BlazinBlue88 posted...
You clearly don't understand encryption. The company itself (employee or hacker) isn't able to see what your actual username/password information is. It's like giving them a locked safe to hold onto for safe keeping but not giving them the combination. That's the idea behind it anyway.
Encryption doesn't protect data forever. All encryption types will eventually be cracked. Just like the safes you used as an analogy. And if some vulnerability is discovered in the way they do shit, everyone using it is fucked. Using a password manager that saves the data locally is much safer. My computer isn't a massive target for hackers. LastPass's servers are.
... Copied to Clipboard!
TaylorHeinicke
04/04/23 10:41:49 AM
#12:


CaptainStrong posted...
Why would anyone use a password manager that saves your passwords on the fucking Internet?
been saying this since the moment those things started to roll out.

nothing is truly secure. not even your piece of paper hidden in your office supplies.

but i would much rather pick that over giving my passwords to a strange company on the internet lmfao

fucking delusional

---
St. Louis Battlehawks (5-2)
... Copied to Clipboard!
voldothegr8
04/04/23 10:53:34 AM
#13:


CaptainStrong posted...
Encryption doesn't protect data forever. All encryption types will eventually be cracked. Just like the safes you used as an analogy. And if some vulnerability is discovered in the way they do shit, everyone using it is fucked. Using a password manager that saves the data locally is much safer. My computer isn't a massive target for hackers. LastPass's servers are.

BlazinBlue88 posted...
You clearly don't understand encryption


---
Oda break tracker 2022- 13 (3) | THE Ohio State:11-1 | Las Vegas Raiders: 6-9
... Copied to Clipboard!
BlazinBlue88
04/04/23 11:18:54 AM
#14:


CaptainStrong posted...
Encryption doesn't protect data forever. All encryption types will eventually be cracked. Just like the safes you used as an analogy. And if some vulnerability is discovered in the way they do shit, everyone using it is fucked. Using a password manager that saves the data locally is much safer. My computer isn't a massive target for hackers. LastPass's servers are.
You're not wrong. All encryption will be cracked eventually but currently AES-256 encryption is the gold standard. It hasn't even come close to being cracked. If/when it is cracked, yeah everyone is fucked cause many governments including the US uses AES-256 to encrypt top secret level information. AWS uses AES-256 for the thousands of companies that use their services.

If/when it is cracked, their will be bigger fish to fry for hackers than end user passwords.

Also yes you are correct that your local computer isn't a massive target for hackers. But now you need to deal with all the risk that comes with having those passwords on a local computer. Hardware failure, burglary, home flood/fire damage. It's up to the individual to see what they consider more of a risk and if the convenient features of cloud based password managers are worth the possible trade off.

---
http://i.imgur.com/R15aJJ3.png http://i.imgur.com/NJqp6LS.png
... Copied to Clipboard!
Solid_Sonic
04/04/23 11:21:41 AM
#15:


Personally I trust 2FA more than a secure password. But I have way too many devices that need to be logged into different things.

---
Surely if I stick up for rich people on the Internet I'll eventually get a sweet job offer from them, right?
... Copied to Clipboard!
Cheater87
04/04/23 11:22:07 AM
#16:


Switched to Bitwarden years ago.

---
You're finally awake, welcome to the real world!
... Copied to Clipboard!
the_rowan
04/04/23 11:30:55 AM
#17:


BlazinBlue88 posted...
You're not wrong. All encryption will be cracked eventually but currently AES-256 encryption is the gold standard. It hasn't even come close to being cracked. If/when it is cracked, yeah everyone is fucked cause many governments including the US uses AES-256 to encrypt top secret level information. AWS uses AES-256 for the thousands of companies that use their services.

If/when it is cracked, their will be bigger fish to fry for hackers than end user passwords.

Also yes you are correct that your local computer isn't a massive target for hackers. But now you need to deal with all the risk that comes with having those passwords on a local computer. Hardware failure, burglary, home flood/fire damage. It's up to the individual to see what they consider more of a risk and if the convenient features of cloud based password managers are worth the possible trade off.

You may not be a target for hackers, but if you do happen to download an infected installer or get malware on your computer by any random means, it will often scan your computer for what looks like passwords or personal information, which can later be used against you. Having your passwords in plaintext is just awful practice. Even just the basic step of putting them in a spreadsheet and encrypting the spreadsheet with a secure password you don't use for anything else makes a significant difference.

---
"That is why war is so tragic. To win means to make victims of your opponents and give birth to hatred." - Kratos Aurion, Tales of Symphonia
... Copied to Clipboard!
BlazinBlue88
04/04/23 11:53:46 AM
#18:


the_rowan posted...
You may not be a target for hackers, but if you do happen to download an infected installer or get malware on your computer by any random means, it will often scan your computer for what looks like passwords or personal information, which can later be used against you. Having your passwords in plaintext is just awful practice. Even just the basic step of putting them in a spreadsheet and encrypting the spreadsheet with a secure password you don't use for anything else makes a significant difference.
I didn't say you weren't a target. Just agreeing you aren't a massive target like a major company is. I also didn't assume the method he was referring to when suggesting storing credentials locally on his computer. There are several secure methods of doing it locally. Like you said, an encrypted spreadsheet at minimum.

---
http://i.imgur.com/R15aJJ3.png http://i.imgur.com/NJqp6LS.png
... Copied to Clipboard!
Topic List
Page List: 1