Re:Ask HN: How did my LastPass master password get leaked?
by gregsadetsky on Monday December 27, 2021 @06:52PM
(#29708413)
Again, really great point re: our passwords hashes floating around, rather than the passwords themselves.
I wonder if haveibeenpwned.com would somehow have information about this. I just pinged them on twitter.
Personally, I've long recommended people stay well clear of LastPass for their bad record of security, so shipping a bug in password-hash verification, or treating password hashes haphazardly would not surprise me in the slightest.