Re:Ask HN: How did my LastPass master password get leaked?
by Fnoord on Monday December 27, 2021 @07:59PM
(#29709023)
1) Clone random git repo on Kali, related to Kali usage.
2) Don't read the code.
3) ???
4) Forever don't know what or when it happened.
Re:Ask HN: How did my LastPass master password get leaked?
by balls187 on Monday December 27, 2021 @05:43PM
(#29707798)
> Just because you put a warning label on a bad practice doesn't mean it's a good practice.
That is such a salient point, generally.
Re:Ask HN: How did my LastPass master password get leaked?
by provobro on Monday December 27, 2021 @07:03PM
(#29708512)
Funny how common it is though
Re:Ask HN: How did my LastPass master password get leaked?
by wary on Wednesday December 29, 2021 @07:58AM
(#29724393)
Well, why shouldn't people who already use insecure software with vulnerabilities (LastPass) without the possibility to even audit the code also run some code written by other people they don't know?
Re:Ask HN: How did my LastPass master password get leaked?
by rhizome on Monday December 27, 2021 @08:31PM
(#29709267)
BREAKING: There is no perfect security.
>Would be so easy to imitate you, reupload the code with an exploit.
Put your keyboard where your fingers are: do it by tomorrow morning and post here when you're done.
Pumping your passwords through some random code on Github that has a "be smart" label doesn't make it a good idea.
Would be so easy to imitate you, reupload the code with an exploit. For giggles, if I was making this into a hijack I'd leave all your warnings in and even make them bigger and more obvious, confident in the knowledge that 99%+ of my stolen users wouldn't read the code or would just download the binaries sight unseen.