Re:Ask HN: How did my LastPass master password get leaked?
by gregsadetsky on Monday December 27, 2021 @03:48PM
(#29706616)
I checked and the same information regarding the attempted login appears in my LastPass "Account History". I also talked to support and they've confirmed this.
Re:Ask HN: How did my LastPass master password get leaked?
by vbo on Monday December 27, 2021 @04:09PM
(#29706803)
Quick note that apple allows you to download a recovery code and disable all other account recovery mechanisms which I found incredibily soothing.
Re:Ask HN: How did my LastPass master password get leaked?
by aNopBxEjtX on Tuesday December 28, 2021 @10:06AM
(#29714420)
I sense sarcasm, but in case my sense is off, there is a webapp which allows you to log into your apple account and webapps are known to sometimes have security issues.
> Login attempt blocked
> Hello, Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look.
Looks fairly classic. Might want to look at the email headers, to see if it really came from LastPass.
I get about ten of these a day. Some are scarily well-done.
Most are for banks that I don't use, but I also get a lot of attempts to grab my AppleID. My Apple (mac.com) address is an OG address, and has been making the spammer circuit for over a decade. I suspect that I actually get hundreds of spams a day, but Apple is good at nuking most of them, before they reach my inbox.