Index
2015-06-19 12:33Stephen Russell : LAST PASS Hacked
2015-06-19 14:42Kurt Wendt : [NF] RE: LAST PASS Hacked
2015-06-19 14:52Kevin Cully : Re: LAST PASS Hacked
2015-06-19 14:55Stephen Russell : Re: [NF] LAST PASS Hacked
2015-06-19 15:00Ted Roche : Re: [NF] RE: LAST PASS Hacked
2015-06-19 18:45Ken Dibble : Re: LAST PASS Hacked
2015-06-19 23:59Geoff : RE: LAST PASS Hacked
2015-06-20 01:25Man-wai Chang : Re: LAST PASS Hacked
2015-06-20 05:58Ted Roche : Re: LAST PASS Hacked
2015-06-20 06:48Ricardo Araoz : Re: LAST PASS Hacked
Back to top
LAST PASS Hacked

Author: Stephen Russell

Posted: 2015-06-19 12:33:02   Link

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

--

Stephen Russell

Sr. Analyst

Ring Container Technology

Oakland TN

901.246-0159 cell

--- StripMime Report -- processed MIME parts ---

multipart/alternative

text/plain (text body -- kept)

text/html

---

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/CAJidMYJdY60PdS6oeLju-CteA=qwbsqhQgoTSgyxK3p8che9sQ@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Stephen Russell
Back to top
[NF] RE: LAST PASS Hacked

Author: Kurt Wendt

Posted: 2015-06-19 14:42:14   Link

An interesting article Stephen. Myself - I don't use LastPass.

But - shouldn't this be marked [NF]? No problem - I just rectified the situation...

-K-

-----Original Message-----

From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Stephen Russell

Sent: Friday, June 19, 2015 1:33 PM

To: profoxtech@leafe.com

Subject: LAST PASS Hacked

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

--

Stephen Russell

Sr. Analyst

Ring Container Technology

Oakland TN

901.246-0159 cell

--- StripMime Report -- processed MIME parts --- multipart/alternative

text/plain (text body -- kept)

text/html

---

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/80838F1CA795B14EA1AF48659F35166F1C2AB8@DREXCH02.corp.globetax.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Kurt Wendt
Back to top
Re: LAST PASS Hacked

Author: Kevin Cully

Posted: 2015-06-19 14:52:19   Link

The TechSNAP podcast reviews the LastPass hack. Basically, change your

master password to a unique password and you should be okay.

https://www.youtube.com/watch?v=dxVHGYx9Gk0&feature=youtu.be&t=1h8m31s

On 06/19/2015 01:33 PM, Stephen Russell wrote:

> http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

>

>

>

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/558472F3.60901@cullytechnologies.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Kevin Cully
Back to top
Re: [NF] LAST PASS Hacked

Author: Stephen Russell

Posted: 2015-06-19 14:55:20   Link

On Fri, Jun 19, 2015 at 2:42 PM, Kurt Wendt <Kurt_Wendt@globetax.com> wrote:

> An interesting article Stephen. Myself - I don't use LastPass.

>

> But - shouldn't this be marked [NF]? No problem - I just rectified the

> situation...

> ----------

LastPass is saying that they lost no data now.

--

Stephen Russell

Sr. Analyst

Ring Container Technology

Oakland TN

901.246-0159 cell

--- StripMime Report -- processed MIME parts ---

multipart/alternative

text/plain (text body -- kept)

text/html

---

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/CAJidMYKqSW-KmSnYQHAYBDU3XJk6ag1kW1tBMdOVL+q07Y69Sw@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Stephen Russell
Back to top
Re: [NF] RE: LAST PASS Hacked

Author: Ted Roche

Posted: 2015-06-19 15:00:35   Link

I'm a fan of LastPass. It's the most convenient password keeper I've

used for Windows-Linux-Android shared passwords, complex password

generation, etc.

The hack quite likely stole nothing but my email address, which is

surely not a secret.

I updated my master password, as suggested, "out of an abundance of

caution" as they say.

It's still better than using Password123 everywhere!

On Fri, Jun 19, 2015 at 3:42 PM, Kurt Wendt <Kurt_Wendt@globetax.com> wrote:

> An interesting article Stephen. Myself - I don't use LastPass.

>

> But - shouldn't this be marked [NF]? No problem - I just rectified the situation...

>

> -K-

>

> -----Original Message-----

> From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Stephen Russell

> Sent: Friday, June 19, 2015 1:33 PM

> To: profoxtech@leafe.com

> Subject: LAST PASS Hacked

>

> http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

>

>

>

> --

> Stephen Russell

> Sr. Analyst

> Ring Container Technology

> Oakland TN

>

> 901.246-0159 cell

>

>

> --- StripMime Report -- processed MIME parts --- multipart/alternative

> text/plain (text body -- kept)

> text/html

> ---

>

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/CACW6n4ug7Jc8CBy5rvHXkT3MNK8ESPMKpMrVjRWiWdKv6rigQA@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Ted Roche
Back to top
Re: LAST PASS Hacked

Author: Ken Dibble

Posted: 2015-06-19 18:45:04   Link

>http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

Anything that's in the "cloud" can be hacked. My advice: unless there

is an essential, functional reason that is much more serious than

personal convenience to put something there, don't. You're only

asking for trouble.

In the case of passwords: Do you really think it's safer to keep your

passwords on somebody's server that is potentially connected to every

person who has access to a computer on the internet, than to just

keep them on a piece of paper folded up in your wallet? Wallets are

"portable" too.

When are people going to stop this magical thinking about computers?

Ken Dibble

www.stic-cil.org

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/D5.45.13658.769A4855@cdptpa-oedge03

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Ken Dibble
Back to top
RE: LAST PASS Hacked

Author: Geoff

Posted: 2015-06-19 23:59:03   Link

It's the same as the nude photos hacked on the cloud. Are they any safer on

someone else's server than your home computer - which is turned off most of

the time anyhow? Of course, not taking nude photos and putting them

ANYWHERE that isn't encrypted is perhaps a more sensible idea or even... not

taking them at all.

-----Original Message-----

From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Ken Dibble

Sent: Saturday, 20 June 2015 9:45 AM

To: profox@leafe.com

Subject: Re: LAST PASS Hacked

>http://lifehacker.com/lastpass-hacked-time-to-change-your-master-passwo

>rd-1711463571

Anything that's in the "cloud" can be hacked. My advice: unless there is an

essential, functional reason that is much more serious than personal

convenience to put something there, don't. You're only asking for trouble.

In the case of passwords: Do you really think it's safer to keep your

passwords on somebody's server that is potentially connected to every person

who has access to a computer on the internet, than to just keep them on a

piece of paper folded up in your wallet? Wallets are "portable" too.

When are people going to stop this magical thinking about computers?

Ken Dibble

www.stic-cil.org

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/00a801d0ab15$d7ec12a0$87c437e0$@adam.com.au

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Geoff
Back to top
Re: LAST PASS Hacked

Author: Man-wai Chang

Posted: 2015-06-20 01:25:17   Link

The next victim: KeePass? :)

On Sat, Jun 20, 2015 at 1:33 AM, Stephen Russell <srussell705@gmail.com> wrote:

> http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571

--

.~. Might, Courage, Vision. SINCERITY!

/ v \ 64-bit Ubuntu 9.10 (Linux kernel 2.6.39.3)

/( _ )\ http://sites.google.com/site/changmw

^ ^ May the Force and farces be with you!

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/CAGv=MJCTqszQAp-ra5=KV9TemEN80i1B4CNsEfkxnJtYkQJ27A@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Man-wai Chang
Back to top
Re: LAST PASS Hacked

Author: Ted Roche

Posted: 2015-06-20 05:58:21   Link

On Fri, Jun 19, 2015 at 7:45 PM, Ken Dibble <krdibble@stny.rr.com> wrote:

> In the case of passwords: Do you really think it's safer to keep your

> passwords on somebody's server that is potentially connected to every person

> who has access to a computer on the internet, than to just keep them on a

> piece of paper folded up in your wallet? Wallets are "portable" too.

Yup, I do. And I've given it a lot of thought.

507 passwords are unique, and when the site allows, 23 characters of

upper, lower, numeric and special. I don't have to distinguish zero

from Oh or a scribbled 6 from a lowercase g. I log on from a

half-dozen machines with at least 4 different OSes, all supported.

They're synchronized, easily to regularly update, and encrypted on my

local machine store as well as "in the cloud" so the exploit is going

to steal a fully-encrypted blob that will take them several decades to

decrypt. I'm not worried.

My "paper folded in the wallet" was an entire index card box and quite

a bit to manage.

> When are people going to stop this magical thinking about computers?

Yeah, that's not gonna happen.

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/CACW6n4s3r5234nXCo-as9Zv7MX=mctUyBCtp3BDWXbbWMbc+dg@mail.gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Ted Roche
Back to top
Re: LAST PASS Hacked

Author: Ricardo Araoz

Posted: 2015-06-20 06:48:33   Link

Ken keeps them folded in his wallet, the whole bunch of nude photos :P

On 20/06/15 01:59, Geoff wrote:

> It's the same as the nude photos hacked on the cloud. Are they any safer on

> someone else's server than your home computer - which is turned off most of

> the time anyhow? Of course, not taking nude photos and putting them

> ANYWHERE that isn't encrypted is perhaps a more sensible idea or even... not

> taking them at all.

>

>

>

> -----Original Message-----

> From: ProFox [mailto:profox-bounces@leafe.com] On Behalf Of Ken Dibble

> Sent: Saturday, 20 June 2015 9:45 AM

> To: profox@leafe.com

> Subject: Re: LAST PASS Hacked

>

>

>> http://lifehacker.com/lastpass-hacked-time-to-change-your-master-passwo

>> rd-1711463571

> Anything that's in the "cloud" can be hacked. My advice: unless there is an

> essential, functional reason that is much more serious than personal

> convenience to put something there, don't. You're only asking for trouble.

>

> In the case of passwords: Do you really think it's safer to keep your

> passwords on somebody's server that is potentially connected to every person

> who has access to a computer on the internet, than to just keep them on a

> piece of paper folded up in your wallet? Wallets are "portable" too.

>

> When are people going to stop this magical thinking about computers?

>

> Ken Dibble

> www.stic-cil.org

>

>

[excessive quoting removed by server]

_______________________________________________

Post Messages to: ProFox@leafe.com

Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox

OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech

Searchable Archive: http://leafe.com/archives/search/profox

This message: http://leafe.com/archives/byMID/profox/55855311.7000207@gmail.com

** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

©2015 Ricardo Araoz