Categorized | Video

Security Now 256: LastPass Security

Hosts:Steve Gibson with Leo Laporte Steve thoroughly evaluates LastPass, explains why high-security passwords are necessary, and tells us how LastPass makes storing those passwords secure. Download or subscribe to this show at twit.tv/sn. We invite you to read, add to, and amend our show notes. For 16kpbs versions, transcripts, and notes (including fixes), visit Steve’s site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Video Rating:

CSA DISCLAIMER: This video taken from YouTube. We are not responsible for any copyright violations, video materials, hacking or cracking activities, or any other. If you have any legal issues, please contact the appropriate host site.

Related Posts
  • Google+ Project Vs Facebook Safety Features
    Today there are many social networks on the internet and everyday new ones are being introduced with new and better features. They have unique and useful features, which makes it easy for users to rem...
  • Browser Updates
    Just a few days ago, two major web browsers have been updated to fix security vulnerabilities which may allow attackers to infect the computer with malware just by visiting a hacked website.Google rel...
  • Cyber Crooks All Set to Crash the British Royal Wedding
    As we have seen with many major events in the past, news of the British Royal Wedding is currently being used by cyber criminals to bolster their spam campaigns and push rogue antivirus software throu...
  • 419 Scammers Still Open to ‘Traditional Postal Services’ Option
    Communication in the today's world is dominated by email, instant messaging, and social networking. However, for making any formal statement or announcement, hard-copy letters are still sent using pos...
  • DLL-Based FAKEAV Returns In The Wild
    In our previous FAKEAV whitepaper, we presented how Trend Micro researchers tracked down the evolution of FAKEAV and classified its development, behavior-wise, according to generations. One of the ear...
  • Adobe updates Reader and Acrobat
    A little earlier as announced, Adobe released updated versions of Adobe Acrobat and Reader. These programs were vulnerable to the Flash Player zero-day-vulnerability as well, which was fixed last week...
  • iPhone Tracking
    Some time ago, a security researcher, Alex Levinson, found out the iPhone was keeping a SQLite database of the iPhone’s location (wifi-based location, cell-based or GPS) and a few other informat...
  • Silverlight Update Available, (Thu, Apr 21st)
    Microsoft has issued a security patch for Silverlight KB2526954. It fixes several security issues. However, the Microsoft link to KB2526954 is still not live. If you have Microsoft update running, it ...
  • Search Engine Security available for Firefox Mobile
    While the number of threats targeting mobile devices is increasing, web browsers for mobile devices are still lacking the security features of their Desktop counterparts. For example, Firefox 4 Mobile...
  • Rush Towards Gold Related Spam
    On April 20, for the first time ever, gold rose above $1,500 an ounce as worries over the U.S. economic outlook boosted demand for the metal as a haven. Within hours, Symantec observed this spammer's ...

12 Responses to “Security Now 256: LastPass Security”

  1. elvigia666 says:

    Short story, if you use a long good master password, you dont have to trust them, even if they are evil or servers get attacked, if you attempt to bruteforce AES 256, the information might get decrypted for your grand-grand-grand-grand children to look at, or said otherwise, when the human race has move civilization to mars.

  2. CorporateRule says:

    We’ve used LastPass online for 2 years now, no problems whatsoever, and we store credit cards on every account we use!
    We left RoboForm because it was hacked on our systems by a Trojan virus which compromised our financial data.
    RoboForm is still hackable (apparently!) and we’d like to keep our Identities ours.

  3. rnawky says:

    Citrix is a ripoff, all their products are overpriced and there are better, free alternatives out there. Instead of paying out the ass for GoToAssist, check out TeamViewer (it’s free)

  4. rnawky says:

    He mentioned you can only have one SSL certificate bound per IP address. This is wrong, you can have one per PORT on an IP address.

  5. kappuru says:

    @bestSVMS You’re incredibly wrong about this. If you want to test it out yourself email us at support@lastpass.com.

  6. wizardprang says:

    Lots of “can-we-trust-them” posts here…

    Is Steve Gibson trustworthy? In five years of podcasts I have yet to see him being called out over a major issue. That he is humble enough to correct errors on the show makes him more trustworthy than most for-profit corporations who never “admit to wrongdoing”. We all trust Google with our passwords with neither source nor audit. You’ve got to draw the line somewhere.

    I use LastPass and I trust them. They have too much to lose if they mess up.

  7. mikycomputers says:

    gangz im with you, how can we sure about it?
    to what i know = don’t trust anyone on the net. keep your password only with you and change them from time to time.
    keepass can be safe because you can check if it broadcast to the net.

  8. GangzTube says:

    I hour and 4 minutes into the video Steve talks about a site name he makes up that we can’t trust, so what does this really tell us, who can we really trust and oh because LastPass is some fancy name we can now all trust it? As an IT Tech you can never be sure of anyone you put your trust in on the internet and this means LastPass too!

  9. bestSVMS says:

    Only problem is that they haven’t been security audeted, and there is no source availible. There is no way to check of they do everything they say, such as not storing your password, encyrpting properyly, or making sure they aren’t sending back you passwords

  10. ZeroSignalZen says:

    @Austinmassee 0:52:00

  11. sparcher says:

    @Austinmassee

    Geez, you have the attention span of a 2 weeks old kitten. :)

    It starts at 0:52:00 :)

  12. Austinmassee says:

    I’m only six minutes in. This video is incredibly long.

    I am excited to hear about last pass tho. Eventually?

Trackbacks/Pingbacks


Security Status

Beware Facebook "Timeline" scams http://t.co/W5EW0cVv
5 months ago
Nigerian government (unknowingly) hosts phishing website http://t.co/uQd42ENw
5 months ago
PCMag Awards McAfee All Access its Editors’ Choice: SANTA CLARA, Calif.--(BUSINESS WIRE)--McAfee today announced... http://t.co/FakV7Vd8
5 months ago
RT @mikko: I hadn't noticed Google Maps has added 3D models of buildings. Here's a (very accurate) view of F-Secure HQ in Helsinki http://t.co/IKfAZlak
5 months ago
North Koreans aren't known for their online presence. But others may be lured into clicking Kim Jong-Il 'videos' too http://t.co/yQOon6YT
5 months ago
How to Protect Your Professional Reputation on Facebook Timeline http://t.co/I4bcR2VN
5 months ago
This is pretty impressive from @Softpedia: Facebook scans 2 trillion link clicks and blocks 220 million posts each day http://t.co/vKsn9gNl
5 months ago
Need for integrated approach to security in industrial control systems - http://t.co/tPBCNOow with @PikeResearch
5 months ago
Some free-based music we play at work http://t.co/xu5agZfc
5 months ago
Japan’s cyber defense weapon: a virus. It includes quotes by @Luis_Corrons via @InfosecurityMag
5 months ago