Ask HN: How did my LastPass master password get leaked?

Re:Ask HN: How did my LastPass master password get leaked? by Raed667 on Monday December 27, 2021 @02:48PM (#29706057)

My bet would be on malware or compromised browser extension. You probably typed (or copy/pasted) the password ans something kept a copy along the way.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @02:51PM (#29706081)

Compromised browser extension could make sense, aye.

Do Chrome extensions have access to the file system too? Is there a chance my local KeePassX file has been siphoned off?

Thanks

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by Raed667 on Monday December 27, 2021 @02:59PM (#29706156)

I don't think that's possible, more likely an extension that has access to the login form of lastpass

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @03:09PM (#29706239)

Got it, thanks. And yes, you're right, after checking, Chrome extensions don't have access to local files by default. I checked all of the extensions I have (after disabling them all) and none had "file access" enabled.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by tyingq on Monday December 27, 2021 @04:37PM (#29707064)

Clipboard access might be possibility.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by halpert on Monday December 27, 2021 @04:32PM (#29707009)

Chrome extensions can run native binaries, so yes.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by aNopBxEjtX on Tuesday December 28, 2021 @09:57AM (#29714340)

they can't

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by halpert on Tuesday December 28, 2021 @04:52PM (#29718709)

They can. Look up native messaging ports.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by aNopBxEjtX on Wednesday December 29, 2021 @02:37PM (#29729051)

that doesn't let you launch processes, it lets you interact with running ones. even if the chrome extensions could launch new processes, they run inside Untrusted integrity level on Windows, you can verify this at chrome:sandbox and checking the Chrome task manager (shift+esc). You cannot interact with processes above your own integrity level nor launch processes with an integrity level higher than your current.

[ Parent | on HN ]