Re:LastPass: Notice of Recent Security Incident
by AlexCoventry on Thursday December 22, 2022 @05:15PM
(#34099587)
This bear has the ability to spin up an AWS cluster of bears, unfortunately.
[ Parent
| on HN ]
Re:LastPass: Notice of Recent Security Incident
by dijit on Thursday December 22, 2022 @05:45PM
(#34099932)
AWS is probably the most expensive way to do this.
Either rent some machines from an ex-crypto miner, since AES can be decyphered on GPUs or get some old extremely cheap boxes from the hetzner auction.
Re:LastPass: Notice of Recent Security Incident
by nikau on Thursday December 22, 2022 @06:56PM
(#34100623)
People who are trying to crack these passwords are also likely to be using compromised AWS accounts.
Re:LastPass: Notice of Recent Security Incident
by yasp on Friday December 23, 2022 @10:04AM
(#34106562)
They're still subject to economic considerations (assuming a non-state actor). If the expected value on a cracked account is less than the expected cost to crack it, a rational actor won't bother. That they may use cracked AWS accounts, or botnets, to perform this cracking does not change these economic considerations.