News for hackers. Stuff that matters.
Re:LastPass breach gets worse – reddit.com/r/sysadmin by ryandrake on Wednesday January 25, 2023 @12:52PM (#34521636)
Depending on how it was implemented, that could just increase the attack surface. Assuming it's a cloud service, now we have another company that has all your passwords, that can be breached. A better way would be desktop software that runs on your local machine and logs in to each web site by itself and changes all your passwords, without using any remote compute or storage, outputting a local file with all your new passwords (don't make the same mistake again using a cloud password manager).
Re:LastPass breach gets worse – reddit.com/r/sysadmin by azinman2 on Wednesday January 25, 2023 @12:54PM (#34521678)
I imagined this was local. I think it would be very difficult to trust it otherwise.
Re:LastPass breach gets worse – reddit.com/r/sysadmin by sorokod on Wednesday January 25, 2023 @02:40PM (#34523115)
Attack surface will increase regardless of implementation. It is another point that can be attacked, one that did not exist before.