[tahanteada]

Häkkerid ründavad Password Managere:
PS: Ma pole küll ise mende Password Manageride kasutaja kuid ehk on kellelegi järgmisest loost kasu.

Oops... Popular Password Managers Are Not As Secure As You Think

Just few days ago, we reported about two critical vulnerability in mobile version of the most popular password manager application from a popular Password management company RoboForm, which manages your passwords for different websites.

Now, researchers have published a detailed explanation on the security vulnerabilities discovered in five different and popular password managers, including RoboForm, that could allow cybercriminals to grab your credentials.

The serious security holes were found and reported by the University of California Berkeley researchers named: Zhiwei Li, Warren He, Devdatta Akhawe and Dawn Song. The critical vulnerabilities were discovered in the popular password managers that includes RoboForm, LastPass, My1Login, PasswordBox and NeedMyPassword.

"Our attacks are severe: in four out of the five password managers we studied, an attacker can learn a user’s credentials for arbitrary websites," Researchers wrote in the paper (PDF) titled as The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers.

Edasi lingil:
http://thehackernews.com/2014/07/oops-popular-password-managers-are-not.html

[Märt.]

2-step authentication ehk abiks. LastPassis kasutusel täiendavalt veel Google Authenticator, nii et ptui, ptui, ptui.

[dksvertix]

Kasutasin LP-d kuni üks imeline päev peale sisselogimist tahtis ta, et ma lubaks siis sisselogida šveitsist, kui juba šveitsist sisse login. Ma asusin eestis ja ei olnud mul ka ei mingit VPNi, proxyt ega midagi taolist. LP-l oli üks huvitav feat veel: ta genereeris kindla mustriga paroole. Vb genereerib tänaseni. Noh jah, Snowden ju ütles, et ära usalda oma privaatsust lääneriikide kättesse.

Peale LP-d hakkasin kasutama KeePassi. Enam ei virise.