Thus, if you had an account with say, Coinbase (a crypto exchange), the hackewr can see this from the hack even though he does not know your Coinbase login details. The attacker though already has all the email addresses associated with Lastpass accounts, and this combined with the URL information is a disaster waiting to happen. Not encypting URLs, which 1Password and Bitwarden, was a majot failure by Lastpass because the hacker can use this information for targeted attacks even though though the hacker may be unable to decrypt the vaults.
The two main reasons I left LastPass are that they were not transparent about the breach and also that they do not enctypt URLs.
0 kommentar(er)
