LastPass owner GoTo has been hacked

Re:LastPass owner GoTo has been hacked by r_c_a_d on Thursday December 01, 2022 @05:45AM (#33814624)

I want to as well, but annoyingly there are many sites that insist on a "special" character because their strength measure says "low" for the 20 character alphanumeric string I generated %-}

[ Parent | on HN ]

Re:LastPass owner GoTo has been hacked by wonderwonder on Thursday December 01, 2022 @09:36AM (#33816737)

My favorite is when they actually limit what special characters you can use. Must include 1 of x special characters. Why? I always just assume they baked their own password storage and couldn't figure out how to handle the whole set of special characters

[ Parent | on HN ]

Re:LastPass owner GoTo has been hacked by jaywalk on Thursday December 01, 2022 @10:49AM (#33817838)

Multiple times I've found that this is caused by a web application firewall that is intended to mitigate SQL injection attacks. So they disallow the characters that would commonly be used in those attacks.

[ Parent | on HN ]

Re:LastPass owner GoTo has been hacked by wonderwonder on Thursday December 01, 2022 @01:50PM (#33820747)

Interesting, I had never considered that

[ Parent | on HN ]

Re:LastPass owner GoTo has been hacked by yencabulator on Friday December 02, 2022 @11:19AM (#33832539)

On those sites, I generally insert the same fixed uppercase-and-symbol string on my zbase32ed-entropy passwords. Zbase32 tends to produce numbers already, and that combo tends to satisfy the silly sites.

[ Parent | on HN ]