hrbrmstr 🇺🇦 🇬🇱 🇨🇦Just stop using LastPass already, folks.
https://blog.lastpass.com/posts/klue-supply-chain-incident-and-lastpass-response
nyanbinary (unvalued goose)@hrbrmstr LastPass? LastStraw!
Phillip 
Thomas Reed
moonwalker@hrbrmstr idk dude, I just like getting hacked too much🙂
Colin Haynes"a third-party market intelligence platform utilized by our go-to-market teams"
I'm too old to understand what that means.
Jonathan T@ColinHaynes @hrbrmstr I'm too old to care what it means.
Donn Castaneda@ColinHaynes @hrbrmstr they sent a bunch of customer data to a contractor they were paying to help them sell more.
Craig Stewart@ColinHaynes @hrbrmstr let me translate:
- "a third-party" : "it wasn't our fault, honest guv"
- "market intelligence platform" : "the data gathered by spying on people who don't block online ads"
- "utilized by our go-to-market teams" : "used by our sales and marketing teams"
- "a third-party" : "it wasn't our fault, honest guv"
- "market intelligence platform" : "the data gathered by spying on people who don't block online ads"
- "utilized by our go-to-market teams" : "used by our sales and marketing teams"
MamiyaMan 🇨🇦 🇺🇦@hrbrmstr It sounds like the problem is with Klue.
@mamiyaman it's both
MyYeeHaa@hrbrmstr @mamiyaman Is there independent reporting that indicates Lastpass content was accessed? From the linked blog post: "LastPass products, services, and infrastructure were not impacted in any way and customer vaults remain secure."
🤷♀️
🤷♀️
Ryan
lemgandiHahahahahahah!
My last job used LastPass. After the last scandal they had us change all our work passwords, as if that would help.
I personally myself use an Android port of KeePass (https://keepass.info/download.html ). Configured to allow only local access. 'Cause I care about that stuff.
lizbian@hrbrmstr @briankrebs OH: lastpass, the Ivanti of password managers
Carina C. Zona@hrbrmstr I've lost track of how many breaches they've had in the last 5 years. It's astonishing that they still have customers.
b3lt3r@hrbrmstr Not just LastPass - stop using *anything* requiring a cloud connection where there is a reasonably viable/accessible non-cloud alternative. Yes it's harder and realistically will be beyond some to do, but how many times do we need to entrust our data to these thieving charlatans? I mean the service providers who sell our data to brokers (227 trusted partners my arse) so they can sell us shit. Just stop if you are at all able.
Steve Scott@hrbrmstr "Klue (klue.com), a third-party market intelligence platform utilized by our go-to-market teams which integrates with our Salesforce and Gong systems."
I'm going with don't be corporate douchebags who care more about marketing than security for 10 points
zl2tod
Dźwiedziu
Chris BussardAgain?!