G+_Eddie Foy Posted June 15, 2015 Share Posted June 15, 2015 lastpass breached welcome to the cloud 'believe' is not fact http://tinyurl.com/pcquamy http://tinyurl.com/pcquamy Link to comment Share on other sites More sharing options...
G+_Taylor Graham Posted June 15, 2015 Share Posted June 15, 2015 Sounds like there isn't much to worry about if you have a strong master password and multi-factor auth turned on. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 15, 2015 Author Share Posted June 15, 2015 Cloud, its raining. Hey (hey) You (you) get off-a my cloud. Its a rather vague post. Tracks can be covered. We don't know the actual scope, only that from the spokeshole.. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 15, 2015 Author Share Posted June 15, 2015 LastPass with 2FA owned with persistence in Sept 2014. (was fun to watch live) Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 16, 2015 Share Posted June 16, 2015 I have a very effective method for keeping the spooks out of my LastPass account; Start with your favorite password, and increment by 1 each week. I've been with them a while, and I'm all the way up to lamepassword123 Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 16, 2015 Author Share Posted June 16, 2015 3 days, 2 of were sat sun is not enough time to know complete scope. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 17, 2015 Author Share Posted June 17, 2015 Wayne Hobbins ALL my creds. On an unknown computer in an unknown location looked over by unknown people, on software I can't see. Yeah, ok sign me up. Link to comment Share on other sites More sharing options...
G+_Taylor Graham Posted June 17, 2015 Share Posted June 17, 2015 If you're using keepass with dropbox or something, you're pretty much exposing yourself the same way. If you're not using something with second factor, vault access is just a keylogger away. At least with lastpass and second factor, an attacker has to compromise the extension as well as your master password. Link to comment Share on other sites More sharing options...
G+_Rud Dog Posted June 18, 2015 Share Posted June 18, 2015 Just attempted to complete the 2 step process for authentication and gave up will try again later when my computer will be safe from growing wings and flying out the window. Geez! Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 18, 2015 Share Posted June 18, 2015 Rudy Trujillo Their system is overwhelmed by the masses who are trying to "re-key". Like Wayne Hobbins I'm not terribly worried about our accounts, so we'll wait a bit before we change our master passwords. Eddie Foy the keylogger method you mention is universal to pretty much all current systems of password management. It's more likely you'll get a keylogger installed through malware that you ineptly download and install with other "free" software than someone with the databases targeting your account and applying massive compute power to crack it. I'm certain you're smarter than that, so I don't think you should be terribly worried that your credentials aren't safe. Watch the latest Security Now for Steve's take. He's been studying and using cryptography since the Caesar cipher fell out of fashion, so I trust his well-educated opinion on security topics. Link to comment Share on other sites More sharing options...
G+_Rud Dog Posted June 18, 2015 Share Posted June 18, 2015 Miss watching "Security Now" ever since Tivo took out the podcast recording feature. No more going through my listing and finding podcasts along side my recorded cable shows or is there, I ask? Sorry I know its a bit off topic but angry about this, sore subject. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 18, 2015 Author Share Posted June 18, 2015 Rudy, you watch SN?? I find it unwatchable. I listen regularly. Steve, with his eyes darting off cam non-stop, to watch his sales, moved me to listen. And his explanations/speaking I find exhausting. (I am physically tired after listening) He can NOT speak. Stammering, going on tangents (or further). I'm NOT blasting Steve's knowledge, but he should only be in print. I DO like Steve. Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 19, 2015 Share Posted June 19, 2015 Rudy Trujillo I don't have experience with a Tivo at all, but I can certainly feel you on losing functionality in a device or app. Eddie Foy Wayne Hobbins We all know how difficult it can be to explain something to someone who we know doesn't have the foundation of knowledge necessary for the topic we're discussing. Steve's trying to do that, even though most of his subscribers are probably a step ahead of the "average user". And, yes, his brain goes faster than his mouth can keep up with sometimes, but he's doing his level best to share his insights and understanding of current security topics. I shudder to think of a time when I won't have Steve's voice (and face) bringing me the security news and discussion each and every week. Edit: I'd add that I've enjoyed the times when Leo had someone else stand in for him. Even when it was Mike Elgan. My favorites are when Fr. Robert fills in for Leo. He and Steve are a powerful duo! Link to comment Share on other sites More sharing options...
G+_Rud Dog Posted June 19, 2015 Share Posted June 19, 2015 Enjoyment of Steve's delivery goes as far as saying my mind enters a trance thus making his concepts easy to follow. I might not understand it the next day but while he is describing the concept I am right there with him. This of course is not true for all his thoughts only because my little tiny brain can not understand some of the places Steve takes us but he tries like hell to get us on board, all we have to do is hold on. BTW while in my so called trance Steve's idiosyncrasies do not interfere with the Matrix type trance which flows with ease. Link to comment Share on other sites More sharing options...
Recommended Posts