Tom's Tech News 3/22/2017: LastPass Exploit Found & Fixed. How it Works & Why I Still Use LastPass

Amazon Affiliate Store

Gear we used on Kit (affiliate Links)
Try ITProTV free of charge and get 30% off!

Use OfferCode LTSERVICES to get 5% off your order at

Tesla Referral Program Offer

Lawrence Systems Shirts and Swag

Digital Ocean Offer Code

HostiFi UniFi Cloud Hosting Service

Protect you privacy with a VPN from Private Internet Access

Google Fi Service Referral Code

More Of Our Affiliates that help us out and can get you discounts!

Twitter

Patreon

Our Forums

GitHub

Discord

Our Web Site

PIA Internet Access Affiliates Link
LastPass Exploit Found & Fixed:
How it works & Why I Still Use
LastPass to manage Passwords

Here is the reddit Discussion

The exploit disclosure

And you can follow Tavis Ormandy and his adventures here on twitter
14140 Pennsylvania Southgate MI 48195
313-299-1503
313-299-1503

[computerkid]

Finally a video that doesn't panic and wear a tin foil hat over all of this. Like you, I still completely trust Lastpass, partially because of how quick they were to respond and fix this issue. And in reality, it was never that big of a problem to begin with.

[BillyDickson]

Well explained, thanks for taking the time.

[ahslan]

Keeper user here. Have been really happy with it and like that it hasn't had any of these type of issues (however you do bring up a good point that the big stories come from the biggest companies)

[Debugnus]

Great video! It is good to be aware and I'm glad most videos I found initially were positive tech reviews talking about what technology goes into this product. Sometimes I think it's almost necessary for these hacks to happen so more vulnerabilities can be address

[vgamesx]

Good explanation and personally I use both lastpass and keepass as I like to have a backup, plus I can use keepass on my phone.

[DilanGilluly]

One thing to note as well. For the exploit to work the binary extension has to be installed. If the universal/non-binary (what I use and what I setup for clients) wasn't affected by the exploit.

[smb]

Thanks for the video Lawrence..it's been a while..are you still confident with LastPass and are you still using it? I was thinking of using it but wanted to get your take..thanks

[howardschatan]

If not Last Pass... which do you recommend?

[BabyPowder]

If a user use google authenticator (2af) is that user still as much
exposed as non user of 2af?