LastPass Breach Is Worse Than You Think Because URLs Were Unencrypted

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by 2Gkashmiri on Friday December 23, 2022 @02:54AM (#34103320)

good for you. are you worried a threat actor would hack your dropbox and steal your keepass file and break your password? probably but that would mean keepass has been broken, something that hasnt been the case so whats the problem?

[ Parent | on HN ]

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by Ekaros on Friday December 23, 2022 @04:06AM (#34103753)

And if that was the case wouldn't same risk profile apply to something hacking the file from your device?

[ Parent | on HN ]

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by 2Gkashmiri on Friday December 23, 2022 @04:33AM (#34103905)

sure. where do you draw the line?

mind- your own mind/post-it notes- you forget and you loose notes

offline- keepass- works. is safe. has not been broken

online- whatever SAAS- works but only pinky promise of being unhackable- can leak from beyond your own control.

your keepass could be hacked but they would require access to your device. you have control over that. you do not have control over lastpass servers

[ Parent | on HN ]

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by hackernewds on Friday December 23, 2022 @05:54AM (#34104408)

best to use what is the most secure. your own brain?

[ Parent | on HN ]

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by CyanBird on Friday December 23, 2022 @07:09AM (#34104913)

Dropbox famously worked with the NSA sharing both encrypted user data as well as decrypted user data...

I would not use them for anything sensitive ever.... But you do you I guess

[ Parent | on HN ]

Re:LastPass Breach Is Worse Than You Think Because URLs Were... by TMWNN on Friday December 23, 2022 @08:47PM (#34112980)

>are you worried a threat actor would hack your dropbox and steal your keepass file and break your password?

I keep a copy of my password file in Dropbox, as one of several backups.

(The file, to begin with, is GPG-encrypted.)

[ Parent | on HN ]