I really don't like the new password changing system that Lastpass uses...saved over my old password before MacRumors confirmed (then denied) my new password. So I had to recover, then try again.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
MacRumors Forums: Security Leak
- Thread starter MacRumors
- Start date
- Sort by reaction score
Unless they have your database file to begin with (crack either your dropbox or iCloud or have local access to your Mac), then the master password is useless to them.
Genuine question -
Say, for example, that I let Safar create a complex password for my online banking site. It will be saved and available across Safari on all of my devices. That's great!
How about when I need to enter the complex password into my online banking iOS app? How does that work?
Obviously I didn't memorize the password. Can I copy and paste it from Safari?
I want to love this feature, but I use so many apps with log-ins that I don't know how useful it will be for most sites that also have apps.
Do what I do.
I have a spreadsheet on my computer that is backed up ..
That is the ONLY place it resides. I do NOT trust ANY cloud solution for passwords. Including Apple's.
I am totally appauled by this
I assumed that the passwords were hashed but, as they say, if you assume anything it will make an ASS out of U and Me.
Macrumors, this is just plain wrong.
I assumed that the passwords were hashed but, as they say, if you assume anything it will make an ASS out of U and Me.
Macrumors, this is just plain wrong.
I assumed that the passwords were hashed but, as they say, if you assume anything it will make an ASS out of U and Me.
Macrumors, this is just plain wrong.
They were salted and hashed. Read the news article and it clearly states that.
My only complaint is that it was not posted sooner. I do appreciate this posting showing what happened but last night when the forums went down would have been a great time to post something. There were at least 5 new article posts from when they went down.
I come to macrumors to get my Apple rumors and news.
Where do I go to get my macrumors news?
I come to macrumors to get my Apple rumors and news.
Where do I go to get my macrumors news?
So someone gets on your Mac, opens Excel or Numbers, and BAM they have all of your passwords.
I'd rather use 1Password myself.
It's on my personal computer that goes nowhere. If a hacker wants to break into my house he has to go through a stressed out Vietnam vet first and he won't like that. Trust me.
It's on my personal computer that goes nowhere. If a hacker wants to break into my house he has to go through a stressed out Vietnam vet first and he won't like that. Trust me.
Last I checked... personal computers can get viruses, can be hacked remotely. I would not feel safe keeping all my passwords in a spreadsheet. Please get 1Password, you'll thank me for it. Boy does it make your life easier (with Safari/Chrome plugin), not to mention a lot safer.
iCloud keychain doesn't seem to activate when I try and log in. I had to recover my account because it never showed up. Anyone else having issues with it on this site?
----------
Oh, I posted before seeing this. Yep, iCloud keychain doesn't work for me on this site either.
----------
Oh, I posted before seeing this. Yep, iCloud keychain doesn't work for me on this site either.
What I will ask is when is the forum software going to be updated. It's still on VB 3.8.7 which is a 2011 release. I know VB costs money, however It does make me wonder about patches on the database and apache
I'll only start to worry when posts like
Number of those seen thus far: ±1.
become prevalent.
Number of those seen thus far: ±1.
Last edited:
I tend to temporarily write down the automatically generated password, enter this into my various apps, then destroy this temporary record.
You should periodically replace your passwords as a matter of course, so I don't find any issue with having no quick access to my password.
(Note however I do use a memorable - albeit cryptic - password for things such as my email which I do use on a lot of other devices)