this post was submitted on 07 Sep 2023
981 points (99.0% liked)

Technology

65819 readers
5125 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
981
More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user (www.theverge.com)
submitted 2 years ago by [email protected] to c/[email protected]
188 comments fedilink hide all child comments
 

More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 27 points 2 years ago* (last edited 2 years ago) (3 children)

Are you not worried your vault is still on their servers? I feel most companies don’t delete shit. Most have ways to get around it saying they keep some info for taxes, accounting, etc.

I wouldn’t sleep well knowing my passwords were on there at any given time.

[–] [email protected] 23 points 2 years ago (1 children)

You can host a bitwarden vault yourself. They open sourced and audited. So, trustworthy that there's no back door somewhere to some degree.

[–] [email protected] 21 points 2 years ago (1 children)

I suspect they're referring to LastPass?

[–] [email protected] 3 points 2 years ago

Ah, make sense. I thought they asked about using Bitwarden's server.

[–] [email protected] 8 points 2 years ago (3 children)

So just change whatever passwords you had saved to LastPass. That would mitigate any issues, right?

[–] [email protected] 3 points 2 years ago* (last edited 2 years ago)

Pretty much. Though also any security questions or other private info you have saved, some of which is much more annoying to protect.

Though one annoying thing is that even if you change everything, what they find might help them social engineer an attack.

I second Bitwarden, BTW. Best password manager I've used.

[–] [email protected] 1 points 2 years ago

Just. It’s not an insurmountable problem, but I wouldn’t be happy changing the login details, one by one, on the some 80 websites I have in my vault.

Not to mention if you’re using an email anonymizer, you’ll have to regenerate new emails for them all too. I guess you could do it on demand, but knowing my batch of emails in floating around the dark web doesn’t sit well with me. Worse yet if it’s your actual email, then they have that now.

[–] 10EXP 1 points 2 years ago

Your username gives me PTSD for past Hades speedruns and I hate it.

[–] [email protected] 1 points 2 years ago

It's e2e and the code to do so is opensource, and you can always host Vaultwarden yourself.