You mean fixed serverside? Or should we be expecting an update for the plug-in soon?
The issue reported by Tavis Ormandy has been resolved. We will provide additional details on our blog soon.
-
-
-
it was fixed serverside - https://bugs.chromium.org/p/project-zero/issues/detail?id=1209 …
-
There's no confirmation from lastpass.
@taviso said they NXDOMAIN'd one domain to 'fix' it, still resolves for me -
What does it resolve to? DNS cacheing is likley. Going to add the IP you get to my hosts and see if it still works. Imagine it will.
#mitm -
Yeah it's most likely dns caching, 23.206.96.228
-
Takes me to http://lastpass.com homepage (with http://lastpass.com cert) but likley still enough to trigger the bug.
#Testingpic.twitter.com/v1H17byQGE
End of conversation
New conversation -
-
-
Ever thought about starting a bug bounty? It sounds like the LastPass product could use regular independent security audits. Just saying.
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
do we need to do anything as user
-
No user action is needed at this time, please see our page for future updates. Thank you.
- 1 more reply
New conversation -
-
-
k, but there's a new one though https://twitter.com/taviso/status/844312124541186048 …
This Tweet is unavailable. - 1 more reply
New conversation -
-
-
Kind of worrying that you're saying this is fixed when it clearly isn't. Are you lying, or incompetent?
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Still reproducible for me in Opera on Windows from Tavis's page.
-
(using the Chrome extension, 4.1.42)
End of conversation
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
@LastPassHelp What is soon?Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
In a tweet - are users OK?
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
annoing that there is more information on local news than onhttps://blog.lastpass.com/
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
it's been over 20 hrs, nothing on your blog. Pretty concerning given your entire business model is security...
Thanks. Twitter will use this to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.