lastpass compromised?

For discussions about security.
Post Reply
Message
Author
User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

lastpass compromised?

#1 Post by Lobster »

Here is an example of Micky Mouse Security thinking . . .

I use the Lastpass service and it is a very good cloud service that
allows you to use only one password
. . . well eh that is the theory . . .

I log in (correctly) with IcePuppy 008 - a pristine 'puppy pfix=ram'
so I want all my passwords and though I understand the risks Lastpass
is convenient. It auto logs into the forum, gmail etc once you have set it up

Only I can not because they MAY have been compromised
and their systems are busy resetting passwords

http://www.itpro.co.uk/633265/lastpass- ... ronic-hack

and this friends is the 'cloud' in all its glory, security and convenience

Pah :evil:
You may now laugh at my misery as I troll through my old fashioned password book . . . :wink:
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

ShellyCat
Posts: 39
Joined: Fri 13 May 2011, 05:38
Location: USA

#2 Post by ShellyCat »

Thanks for the news, Lobster! I use Xmarks and was thinking of getting LastPass, as well...but I think I'll pass!
Puppy Distro: [url=http://openlab.jp/puppylinux/download/quickset_puppy/]pup-431JPqs3 "Quickset Puppy Linux (Japanese/English bilingual)"[/url]
Previous distros: Slackware (preferred), Fedora Core 6 (in school), Ubutntu (not much)

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#3 Post by nooby »

ShellyCat wrote:Thanks for the news, Lobster! I use Xmarks and was thinking of getting LastPass, as well...but I think I'll pass!
oops Xmarks? Did they take care of passwords too? I remember me was on Xmarks maybe one year ago but thought them only cared about my bookmarks. Could they have copied over the passwords from my Firefox without my knowing? Should I go there and try to delete everything?

I thought of getting Last pass too and the other competing services but felt unsure.

I hate my poor memory. one time it took me some two months or more to get the yahoo password back from my memory.
I use Google Search on Puppy Forum
not an ideal solution though

ShellyCat
Posts: 39
Joined: Fri 13 May 2011, 05:38
Location: USA

#4 Post by ShellyCat »

nooby wrote:
ShellyCat wrote:Thanks for the news, Lobster! I use Xmarks and was thinking of getting LastPass, as well...but I think I'll pass!
oops Xmarks? Did they take care of passwords too? I remember me was on Xmarks maybe one year ago but thought them only cared about my bookmarks. Could they have copied over the passwords from my Firefox without my knowing? Should I go there and try to delete everything?
Hi nooby,

Yes, you could sync your passwords (remembered by your browser) with Xmarks, too, but you would have to select the option specifically. They don't do anything without you knowing. (It's completely irrelevant, except to your Xmarks password, if you didn't store passwords in your browser in the first place.)

I have no idea if the Xmarks security was breached as well...Xmarks was originally developed by someone else. The LastPass developers took over Xmarks later. Both server setup and the application can affect security, and I don't know if both apps are even on the same server (or different servers having the same setup).

Also, in Xmarks, you have the option to encrypt the log-in process, encrypt everything being uploaded/downloaded, or encrypt nothing at all (important since network sniffing is one way to steal passwords).

I don't see why you should delete everything...certainly not everything...not your bookmarks.

If you did sync your passwords to Xmarks, you could choose not to do so anymore, but I don't know if that deletes them from the server.

If you did sync your passwords to Xmarks, and you're concerned about it, contact the Xmarks developers for specific info. (Probably there is a link in the Add-Ons manager, but I am using Seamonkey right now so I can't tell you.)
Puppy Distro: [url=http://openlab.jp/puppylinux/download/quickset_puppy/]pup-431JPqs3 "Quickset Puppy Linux (Japanese/English bilingual)"[/url]
Previous distros: Slackware (preferred), Fedora Core 6 (in school), Ubutntu (not much)

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#5 Post by nooby »

oops, it is that bad. I guess it is already too late then.
I mean they already have them don't they? The guys that did the hack+
I use Google Search on Puppy Forum
not an ideal solution though

Post Reply