network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 11 months |
| seen | Mar 18 at 14:18 | |
| stats | profile views | 8 |
|
May 9 |
awarded | Nice Answer |
|
Jan 30 |
comment |
Are services like “LastPass” less secure, as they have all my passwords protected by a single password? @lucas-kauffman With CSP the XSS attack is considerably lower risk. If you have an XSS, it can't be utilized to transport it anywhere. |
|
Jan 29 |
comment |
Are services like “LastPass” less secure, as they have all my passwords protected by a single password? Just FYI Dropbox did accidentally allow anyone in to download your keypass database -- techcrunch.com/2011/06/20/… |
|
Jan 29 |
comment |
Are services like “LastPass” less secure, as they have all my passwords protected by a single password? The pragmatic user would utilize Multifactor to protect their LastPass account - helpdesk.lastpass.com/security-options/… |
|
Jan 29 |
comment |
Are services like “LastPass” less secure, as they have all my passwords protected by a single password? @lucas-kauffman In response to the potential of a future XSS LastPass built CSP ( developer.mozilla.org/en-US/docs/Security/CSP/… ) into its browser extensions in Chrome,Firefox,Safari, Opera and IE (most of which didn't support CSP at all). LastPass analyzed the risk and took a major mitigating step to reduce it's potential impact. It's hard to do JavaScript security well, but we've taken a lot of steps to help mitigate risk. |
|
Jun 8 |
awarded | Teacher |
|
Jun 8 |
answered | How can I be sure Lastpass really can't access my passwords? |
