979
More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user (www.theverge.com)
submitted 2 years ago by [M, B] to c/technology@lemmy.world
186 comments fedilink hide all child comments
 

More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (2 children)

Absolutely, Keepass is a great alternative to cloud managed password managers.

You are also vulnerable to keyloggers or clipboard captures

Keepass (and most password managers) are vulnerable to this as well.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 2 years ago

    True, but KeePass has some countermeasures, like wiping the clipboard after some time, sending the password directly to a browser extension, or entering the master password on a "secure desktop" (technically not all that secure, but more secure than the lack of it).

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 years ago

    Keepass (and most password managers) are vulnerable to this as well.

    Not if you use the browser extension

    Plus it does automatically clear the clipboard after a short time which isn't perfect but it's still an improvement over using a text file

  • permalink
  • fedilink
  • source
  • parent