In this way, they got hold of credentials and keys that were then used to access and decrypt some storage volumes within the firm’s cloud-based storage service. In a lengthy update yesterday, it revealed that the August incident resulted in hackers getting hold of “source code and technical information” from the firm’s development environment, which were subsequently used to target another employee. Then at the end of November, the plot thickened as LastPass revealed “certain elements of our customers’ information” was taken. The update comes after the firm originally said that the incident only resulted in a breach of “source code and some proprietary LastPass technical information.” Now they have unlimited time to run algorithms to figure out how to turn a macaroni necklace picture into usable data.Password management giant LastPass has revealed that hackers that breached the firm in August made off with encrypted customer vault data and unencrypted account information. The keyhole changing every 30 seconds is useless when they already know your pasta pieces. With the recent LastPass breach, the thieves gained access to photographs that your spying neighbor took of your pasta-filled room the last time you opened the door to go to the store. Law enforcement can force you to hand over a dozen uncooked ziti, but they cannot force you to explain what it means. Only you know that two spaghetti equal the number 45 and three elbow macaronis equal the number 99.

It is meaningless to everyone else, but only has meaning to you. Inb4 security through obscurity - it is helpful heuristic to be able to only focus on someone who shouldn't be going up a ladder that doesn't even lead to a window.ĢFA is like having a keyhole whos keyed configuration changes every 30 secondsĮncryption is where the thieves made it into the house looking for your bank account number, but it is filled with various cuts of pasta. Changing a default port is like moving the keyhole to a random place

My lastpass vault