What’s in a PR statement: LastPass breach explained

Re:What’s in a PR statement: LastPass breach explained by mdaniel on Tuesday December 27, 2022 @12:36PM (#34151185)

> since the e2ee does not depend on a user chosen master password.

What's the story with "my phone went in the lake" using that setup?

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by isthisthingon99 on Tuesday December 27, 2022 @01:01PM (#34151524)

Since i use Google Authenticator for numerous services this is going to happen to me one day. So what I did was set it up on more than one phone.

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by mdaniel on Tuesday December 27, 2022 @01:14PM (#34151700)

I would legit pay money for Google to pull that piece of junk from the Play Store, because it's damn malpractice at this point, given there are so many other options that don't straight-up swallow the TOTP keys

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by isthisthingon99 on Tuesday December 27, 2022 @01:21PM (#34151796)

Sorry what

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by ThrowawayTestr on Tuesday December 27, 2022 @01:44PM (#34152102)

I also have two phones with Google Authenticator. Is that a bad idea?

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by FreakLegion on Tuesday December 27, 2022 @01:48PM (#34152173)

You can back the secrets up to a text file, print them out, etc. too. They're short Base32 strings and TOTP is a standardized protocol with an RFC (6238) and everything.

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by isthisthingon99 on Tuesday December 27, 2022 @04:11PM (#34153863)

Yes i did this too

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by jve on Wednesday December 28, 2022 @09:04AM (#34161033)

Except it is cumbersome to doo on Google Authenticator. You must press export to get shown a giant QR code. You can't screenshot it. Must photo with different phone and print on a piece of paper for offline storage.

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by 8n4vidtmkvmk on Tuesday December 27, 2022 @01:07PM (#34151603)

fish it out of the lake and pay someone $1000 to extract the tpm and restore it for you

[ Parent | on HN ]

Re:What’s in a PR statement: LastPass breach explained by sufficient on Tuesday December 27, 2022 @01:29PM (#34151900)

Just wrote a longer answer to the question below, hope that covers your question as well.

[ Parent | on HN ]