| Home : July 14 2014 Computer News : LastPass discloses now-fixed vulnerabilities ahead of security conference |
|
LastPass discloses now-fixed vulnerabilities ahead of security conference |
July 14, 2014
Popular password manager LastPass said it fixed two vulnerabilities that were found last year. The disclosure comes just ahead of a security conference where a research paper describing the problems is due to be presented.Zhiwei Li, a research scientist at Shape Security, reported the flaws to LastPass in August 2013, which were “addressed immediately,” LastPass wrote on its blog.Both flaws involved “bookmarklets,” which assist in filling out stored password information when LastPass’s plugin can’t be used, such as when using a mobile browser.One flaw could be exploited if a bookmarklet was used on a website rigged to attack it, LastPass wrote. The other vulnerability could allow an attacker to create a bogus one-time password (OTP) if a LastPass user was tricked into visiting a malicious website.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2453580/lastpass-discloses-nowfixed-vulnerabilities-ahead-of-security-conference.html#tk.rss_all
|
|
|
|
|
