1
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
Sean Cassidy
Phishing awareness training done via simulated phishing emails that your Security team sends does more harm than good.
- Popular posts
- 3
- Total points
- 350
- HN comments
- 183
- Rank
- #7,707 personal
Visit seancassidy.me → RSS feedOn Hacker News Dec 2014 – Apr 2018
Security & Privacy 2Web & Frontend 1Software Engineering 1Networking & Internet 1Math & Algorithms 1
2
sean cassidy : Don't Pipe to your Shell
It's everywhere . Sometimes they tell you to ignore certificates as well (looking at you, Salt). That's dumb.