News for hackers. Stuff that matters.

A comment on LastPass autofill exploit. Parent comment

Re:LastPass autofill exploit by tedmiston on Wednesday July 27, 2016 @12:26PM (#12174173)
I understand a concern with my phrasing -- to be honest, I didn't put much thought into it as far as considering multiple interpretations.

I have sent a message to 1Password through the official customer support channel to ask the same question posed here. I'll update once they reply.

[ Parent | on HN ]
Re:LastPass autofill exploit by tedmiston on Thursday July 28, 2016 @10:25AM (#12180377)
Update: Here's the response from earlier this morning:

> Thank you for taking the time to write to us here at AgileBits. The current version of the 1Password extension does not use regex to parse URLs for this exact reason. We don't autofill either, which also helps avoid issues like the one you mentioned.

[ Parent | on HN ]