Re:Ask HN: How did my LastPass master password get leaked?
by indigochill on Monday December 27, 2021 @03:19PM
(#29706347)
You don't need access to a password to check it, just the hash (then they hash what you enter and compare the hash to the one they have). So both "They use it to log in to their whatever" and "They don't have access to it" can be correct.
[ Parent
| on HN ]
Re:Ask HN: How did my LastPass master password get leaked?
by hsbauauvhabzb on Monday December 27, 2021 @04:45PM
(#29707165)
If there’s a breached phpbb instance, the attacker can modify login.php to log plaintext credentials.