News for hackers. Stuff that matters.
Re:Google removed my Yubikeys “Just to be safe” by lamontcg on Monday December 26, 2022 @04:06PM (#34141882)
If you had your recovery keys stored in a note on lastpass you might have wanted to rotate those as well recently.

Yeah, in theory those recovery keys should still be secure, but you know for certain that a hostile attacker has the encrypted secure note, and without any confidence in lastpass it makes sense to change them as well.

Unfortunately this means you look exactly like someone doing an account takeover and changing the password and recovery keys on the account.

Re:Google removed my Yubikeys “Just to be safe” by nalllar on Monday December 26, 2022 @04:15PM (#34141967)
Thanks for the heads up.

I don't use lastpass, but if I did I wouldn't have to because this "Just to be safe" process also reset/removed the recovery keys.