News for hackers. Stuff that matters.
Re:LastPass says employee’s home computer was hacked and cor... by olkingcole on Monday February 27, 2023 @09:06PM (#34964770)
Does this mean they got access to unencrypted vaults? I have had a few beers and cannot comprehend from the article or lastpass's statement.
Re:LastPass says employee’s home computer was hacked and cor... by verteu on Monday February 27, 2023 @10:12PM (#34965213)
I don't think so. Per Lastpass's description of their architecture, their server never sees your unencrypted passwords. (Though substantial metadata, such as the website URLs, are not encrypted.)

To get unencrypted vaults, they'd need to change the client-side code. But we haven't been told that this happened.

(As a best practice, it's probably best to assume everything in LastPass vault was compromised at this point.)