News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @04:37PM (#29707062)
Yeah, all of us being phished years ago is a possibility (I just replied to your other comment)

I used macOS/Chrome back in 2017. I definitely could have been phished then, or used a compromised extension.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by AdmiralAsshat on Monday December 27, 2021 @08:27PM (#29709247)
How'd they get past the 2FA, though?

Or does LP shoot an email if it detects a suspicious geo-IP login before the 2FA prompt?

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @08:32PM (#29709269)
LP shoots an email as soon as someone attempts to login with the correct password from a new IP.

Once the IP is approved (you have to follow a link from the email), then you login again with the correct password and then get the 2FA prompt.

[ Parent | on HN ]