TL;DR - LastPass was not breached.

• LastPass uses Salesforce
• a lot of companies use Salesforce
• a lot of companies hired Klue
• Klue was breached by an outsider using a working credential
• outsider harvested OAuth tokens
• outsider accessed Salesforce data for LastPass and other companies

If you're worried that because of this, now your work email, office phone, and preference of cigars or whiskey was compromised, you're living in a wonderful world. Enjoy it.

RE: https://mastodon.social/@404mediaco/116375225490185578

This should not have been a surprise to anyone who is actually concerned with privacy. Anyone shoulder surfing can read notifications. Why would you display private information to everyone who can see the screen?

If you're serious about privacy, you already turned notifs off as soon as you powered on your phone for the first time...even before deleting bloatware.

And then turned off notifs for every app that is installed. For apps where you need to know when to check...let it alert, but not divulge information.

Need to know if the freezer is too warm? Probably fine to show anyone. Text messages? Never show these, especially if the spouse is snarky or spicy.

Convenience is the opposite of security.

Second take: Hiding secret messages behind a biometric scan is silly on a iPhone that can be held in front of your face without your consent. Fingerprints or iris scans require physical force, so are marginally better.

Say it again: Convenience is the opposite of security.

Artificial Intelligence is spelled "O.P.M.". Meta is only risking 20% ownership in its own 2GW datacenter. The rest is funded by selling A+-rated 144A investments.

S&P rated it A+ because Meta's name is attached. But it's lower than Meta's AA- rating because Meta pledged no equity of their own into the project. They convinced Blue Owl to pledge $2.5BB of their own. Investors in Blue Owl and other private credit companies can't take their money out due to restrictions on share redemption.

Meta signed 11 different leases (one for each building). They won't pay rent until June 2029. Only on the hook for 4 years. And, if they don't have equipment consuming power, they only pay a minimum rent + $/MW consumed. Lease renewals are optional.

The properlty is on a 15-year amortization plan to pay back the local power utility with minimum monthly payments regardless of consumption.

Who are the Other People in O.P.M.? Probablly you. Pimlico, Black Rock, and a bunch of other investment companies that manage your retirement accounts and portfolios.

And, the businesses who are in the same insurance and re-insurance pools as the Meta/BlueOwl joint venture. Your portfolio probably invests in those, and in the insurance companies who will be paying out losses in the future.

Losses? If the datacenter won't come online until June 2029 or later, Will cheaper locations already be online? Will the A.I. bubble have burst already?

Other People's Money = you and me, eventually.