News for hackers. Stuff that matters.

A comment on LastPass: Notice of Recent Security Incident. Parent comment

Re:LastPass: Notice of Recent Security Incident by fomine3 on Thursday December 22, 2022 @11:46PM (#34102417)
Decryption is done on user device so default iteration is set not to be too slow on slower devices. If your all devices are fast enough, It's good to configure it.
[ Parent | on HN ]
Re:LastPass: Notice of Recent Security Incident by TechBro8615 on Friday December 23, 2022 @12:29AM (#34102593)
Wait, the default is the less secure option?

This company is a joke.

[ Parent | on HN ]
Re:LastPass: Notice of Recent Security Incident by fomine3 on Friday December 23, 2022 @12:35AM (#34102615)
It's fine that you want extremely secure iteration counts like 99999999999999999999, but you should wait 9999 seconds to unlock. Every product should have just right default value. LastPass default iteration value was maybe fine in 2008 but computer power is improving.
[ Parent | on HN ]