Thursday, May 5, 2011

LastPass security breach alarm sows confusion, CEO says threat is minimal

People who prefer to store their numerous, ever-growing list of passwords in the cloud were in for a big surprise when LastPass revealed earlier in the week a possible security breach in its networks and asked users to reset their master passwords connecting to the site.

Many users got locked out not just from LastPass, an online password management provider, but from their myriad accounts such as gmail. LastPass CEO Joe Siegrist confirmed in an interview to PC World that the threat posed by hackers was less serious than initially thought. The service had asked users have to reset their passwords to avert possible data compromises.

"Seriously dude, this is bad stuff. I'm locked out of ALL my different accounts, and it isn't accepting my lastpass master passphrase. I guess I learned my lesson here. There is no way in hell that I'm storing my important logins/passwords in the cloud again," one person commented on LastPass blog.

Earlier, LastPass had said the sheer load of password changes is slowing down the network. Reacting to users' angst over the password issue, the service said it was changing tactic and offered to help out users. A post on the blog said the following: "We're switching tactics -- if you've made the password change already we'll handle you normally. If you haven't the vast majority of you will be logged in using 'offline' mode so you can still use LastPass like normal and get back to your day, only syncing of new password should suffer (and you'll see the bar)."

Read more: http://www.ibtimes.com/articles/141992/20110506/lastpass-password-master-change-email-gmail-salt-anomaly-data-security-breach-cloud.htm#ixzz1LYF4HTck

No comments:

Post a Comment