News for hackers. Stuff that matters.

A comment on I worked at LastPass as an engineer. My 2 cents on the situation. Parent comment

Re:I worked at LastPass as an engineer. My 2 cents on the si... by kodah on Sunday December 25, 2022 @09:11AM (#34127349)
Because changing the number of rounds requires reencryption and it doesn't sound like they had a workflow for prompting batch reencryption other than through the setting.

Ideally they'd manage that number and prompt the user to change it over time.

[ Parent | on HN ]
Re:I worked at LastPass as an engineer. My 2 cents on the si... by Gasp0de on Sunday December 25, 2022 @12:15PM (#34128915)
It's not that difficult to do though? Just implement a mechanism that re-encrypts when the user enters their password.
[ Parent | on HN ]
Re:I worked at LastPass as an engineer. My 2 cents on the si... by kodah on Sunday December 25, 2022 @12:36PM (#34129171)
I agree, there's workflows they could've built to solve this problem. I wasn't defending them in the slightest.
[ Parent | on HN ]