Re:Breaking LastPass: Instant Unlock of the Password Vault
by paco3346 on Thursday April 09, 2020 @10:17AM
(#22822740)
My understanding is that this is exploitable on any machine using the extension (so Chrome or any other Chromium based browsers) regardless of operating system.
[ Parent
| on HN ]
Re:Breaking LastPass: Instant Unlock of the Password Vault
by 0xff00ffee on Thursday April 09, 2020 @01:56PM
(#22825312)
I don't understand how their "magic cracking tool" manages to crack AES256 "in a few seconds" regardless of the length of the password. Poorly written article. The PDF they link to is more interesting.
From their website:
"Reveal Stored Internet Passwords
Elcomsoft Internet Password Breaker instantly reveals Internet passwords, retrieves login and password information protecting a variety of Web resources and mailboxes in various email clients. The tool instantly extracts passwords, stored forms and AutoComplete information in popular Web browsers, and captures mailbox and identity passwords from popular email clients."
...instantly?