How did LastPass master passwords get compromised?

Re:How did LastPass master passwords get compromised? by jjav on Thursday December 30, 2021 @04:45PM (#29741825)

> In this case, it's at least a few dozen so I think it's fair to assume that such a lie would not survive very long.

This is a very unlikely expectation. Employees are under NDA so nobody will talk publically about it unless one of them feel so strongly about it to sacrifice their career (they'd certainly get fired, and being sued for breaching the NDA isn't going to make finding a new job easier).

Employees at all companies keep quiet about bugs like these all the time, that's the most common outcome.

[ Parent | on HN ]

Re:How did LastPass master passwords get compromised? by nix9000 on Thursday December 30, 2021 @07:31PM (#29743404)

>being sued for breaching the NDA isn't going to make finding a new job easier

NDAs are unenforceable against whistleblowers who report illegal activity.

[ Parent | on HN ]

Re:How did LastPass master passwords get compromised? by hsbauauvhabzb on Friday December 31, 2021 @04:22AM (#29746300)

Would it actually be illegal to cover up/lie about? I assume the company is US based, there is certainly breach regulations in Aus (with a 12 month notification window). I guess if it’s publicly traded then it would be a breach of law, but what about if it was privately owned?

[ Parent | on HN ]