6

Bill: "UPDATE This appears to be refu…" - DEF CON Social

 2 years ago
source link: https://defcon.social/@deaddrop/109565784698153212
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Bill: "UPDATE This appears to be refu…"

UPDATE This appears to be refuted based on outside analysis from others (see thread). Statement below was provided by tech support at #lastpass when I called to determine the state of the PW notes field.
Confirmed with @lastpass tech support that the notes fields in password records are NOT encrypted. So if you stored any sensitive information there, game f'in over. I still don't understand why they aren't encrypting THE ENTIRE RECORD.
Time to fix their graphic. https://www.lastpass.com/security/zero-knowledge-security #fail

Flowchart of the Lastpass security architecture.

report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK