News for hackers. Stuff that matters.

A comment on LastPass breach gets worse – reddit.com/r/sysadmin. Parent comment

Re:LastPass breach gets worse – reddit.com/r/sysadmin by fullstop on Wednesday January 25, 2023 @11:57AM (#34520763)
Okay, one step further then. What happens if your house burns down? Eventually you will want some sort of offsite backup.

Also: https://ohyicong.medium.com/how-to-hack-chrome-password-with...

Passwords are still easy to obtain outside of Chrome, and apparently Firefox is just as easy.

By using the browser's saved password feature you are one RCE away from someone being able to automate the extraction of all of your passwords.

[ Parent | on HN ]
Re:LastPass breach gets worse – reddit.com/r/sysadmin by Izkata on Wednesday January 25, 2023 @06:13PM (#34525504)
I have one, and minimal one on my keychain, both in an encrypted disk image I do memorize the password for.

I'm pretty sure on Firefox if you have the master password set, they're actually encrypted, and has done that for a long time.

[ Parent | on HN ]