![]() He also points out that the hackers could have collected all IPs associated with a user, website URLs which were unencrypted, to profile their activity. As a matter of fact, LastPass has not revealed when the 2nd attack took place, and Palant says that this could have happened in September itself. Palant called the statement as "full of omissions, half-truths and outright lies", and that the company had tried to draw focus to the 2 hacks as two separate incidents, to cover up the fact that they are related to each other. He says in an article on his blog, that by releasing the update right before the holiday season, LastPass wanted to make sure the news flew under the radar. Wladimir Palant, the creator of AdBlock Plus was among those who slammed the statement. Many security researchers have blasted the company for misleading its users about the stolen password vaults. The situation could actually be a lot worse. Martin's write-up explains what LastPass' statement had to say about the recent security incident. ![]()
0 Comments
Leave a Reply. |