{"id":1337,"date":"2017-03-28T23:05:09","date_gmt":"2017-03-29T03:05:09","guid":{"rendered":"http:\/\/mikemartinezonline.com\/blog\/?p=1337"},"modified":"2017-04-22T17:40:09","modified_gmt":"2017-04-22T21:40:09","slug":"another-lastpass-vulnerability","status":"publish","type":"post","link":"https:\/\/mikemartinezonline.com\/blog\/2017\/03\/28\/another-lastpass-vulnerability\/","title":{"rendered":"Another LastPass vulnerability"},"content":{"rendered":"<p>Because I have so very many usernames and passwords, I must use some sort of password database manager.   <br \/>For sometime now I have been using <a href=\"http:\/\/keepass.info\/\">KeePass<\/a> &#8211; an open source password manager.     <br \/>Though it using it &#8216;can&#8217; be slightly more onerous than a completely &#8216;online&#8217; password manager like LastPass, 1Password, Dashlane or the like, it provides for WAY more security by enabling you to &#8216;own&#8217; the database AND a seed file. And being an IT security guy here is no way I\u2019d put my passwords in the cloud. <\/p>\n<p>KeePass is technically an offline password manager, but its database <em>can<\/em> be synced between computers with a service like Dropbox, Google Drive or the like. Of course, at that point, you\u2019re putting your passwords back in the cloud. <strong><u>BUT<\/u><\/strong> if you have created a KeyFile and don\u2019t place that in the cloud and use something that is not obvious. You eliminate the ability for someone to just steal your password database and start brute forcing it.<\/p>\n<p>Okay so now some more bad news. LastPass, probably the most widely used online password keeper, is once again <a href=\"https:\/\/www.theregister.co.uk\/2017\/03\/27\/lastpass_confirms_major_flaw\/\">in the news<\/a> for some VERY serious security flaws.<\/p>\n<p>You might want to rethink your password manager solutions or go back to pen and paper.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Because I have so very many usernames and passwords, I must use some sort of password database manager. For sometime now I have been using KeePass &#8211; an open source password manager. Though it using it &#8216;can&#8217; be slightly more onerous than a completely &#8216;online&#8217; password manager like LastPass, 1Password, Dashlane or the like, it &hellip; <a href=\"https:\/\/mikemartinezonline.com\/blog\/2017\/03\/28\/another-lastpass-vulnerability\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Another LastPass vulnerability&#8221;<\/span><\/a><\/p>\n","protected":false},"author":587,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[268,267,269,21],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/posts\/1337"}],"collection":[{"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/users\/587"}],"replies":[{"embeddable":true,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/comments?post=1337"}],"version-history":[{"count":1,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/posts\/1337\/revisions"}],"predecessor-version":[{"id":1338,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/posts\/1337\/revisions\/1338"}],"wp:attachment":[{"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/media?parent=1337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/categories?post=1337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mikemartinezonline.com\/blog\/wp-json\/wp\/v2\/tags?post=1337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}