LASTPASS NEWS ALERT AND COMMENTARY:
LastPass attackers know your name and billing address and all websites you have saved passwords for, and if your master password isn't sufficiently strong may be possible to brute-force open everything on attacker's machines.

PLEASE READ BEFORE PROCEEDING: https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

The fact LastPass doesn't encrypt website URLs is a known flaw it appears they never fixed on purpose, going back almost 6 years:
https://hackernoon.com/psa-lastpass-does-not-encrypt-everything-in-your-vault-8722d69b2032

This eventual possible security breach was planned-for as part of LastPass' design for username and password protection. This doesn't break the core offering.
But it has stripped away multiple layers of protection and will hasten my looking at @bitwarden

It's impossible to be completely secure in a massive offering. However I have always disagreed with their decision to not 100% encrypt all metadata, and this event shows that was a foolish choice when seen against the inevitable of the entropy our complex electronic systems.

In the end, a password manager is still right choice in comparison to alternative. And a cloud-native offering like LastPass strongly hedges against data loss by normal users trying to manage their own vault. That is an undersold primary risk, not hackers. Still, very disappointed.

Current password setup:
- Primary vault is LastPass with 2FA
- Core fallback "key" accounts like email that allow pw reset are only in a KeyPass db file with 20char password, synced via OneDrive+2FA.
- This is then further backed-up with BackBlaze, using 40char encryption key

Henrietta Lacks was a poor, Black, young mother diagnosed cervical cancer in 1951. When her cells were collected w/o consent, scientists saw they multiplied fast.

“HeLa” cells changed #science. They’re used globally to study viruses, drugs, hormones, genes, diseases & develop vaccines. Lacks passed away at 31 w no recognition.

Rebecca Skloot’s beautiful book about her life & legacy is changing that. Now her statue will replace Robert E. Lee in VA. https://www.nytimes.com/2022/12/20/us/henrietta-lacks-statue-roanoke-virginia.html?smid=nytcore-ios-share&referringSource=articleShare #history #HistoryRemix

1. This high school English teacher is trying to ban 150 books from school libraries in Florida

I talked to her to find out why

Buckle up

This one gets a bit wild

🧵

A partial list of our reporters you can follow on Masto:

•Caroline Chen @carolinechen

•Annie Waldman @AnnieWaldman

•Perla Trevizo @Perla_Trevizo

•Jeremy Schwartz @JeremySchwartz

•Emily Hopkins @emilyhopkins

•Ken Armstrong @bykenarmstrong

•Mariam Elba @mariamelba

•Jessica Lussenhop @lussenpop

•Ellis Simani @emsimani

•Justin Elliott @elliottjustin

•Max Blau @maxblau

•Andy Kroll @andykroll

•Kartikay Mehrotra @kartikay

•Jeremy Kohler @jeremykohler

•Neil Bedi @neilbedi