I worked at LastPass as an engineer. My 2 cents on the situation

Re:I worked at LastPass as an engineer. My 2 cents on the si... by rzimmerman on Sunday December 25, 2022 @05:04PM (#34131907)

Also it’s not clear that the same AES key is used for all secrets. If it’s URL- or tag-derived using the master password then it’s only bad for long secrets (more than 32 bytes) that aren’t random data.

[ Parent | on HN ]

There are no comments on this comment yet.