I, too, have hacked LastPass :) https://labs.detectify.com/2016/07/27/how-i-made-lastpass-give-me-all-your-passwords/ … cc @taviso
yes I'm sure. I removed the exploit, it was a while ago I found this. Weird code is still there, can't look into right now.
-
-
I tested on newest version in chrome+ff before releasing post
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
If they have fixed it, it should be safe to make the exploit available? So that we can check for ourselves.
-
sure, later. I'm on phone now, don't have ssh key on it (maybe I should put it in lastpass? :P).
-
I've decided not to release it in case the bug would come back due to regression/mistake. I checked again now, it's fixed.
-
Could you check if version 3.3.1 of the add-on has it? For various reasons getting a higher version is problematic for some.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.