Munguva ichangopfuura vakawanda Vashandisi veLastPass vataura kuti mapassword avo epamusoro akakanganiswa mushure mekugamuchira yambiro yeemail yekuti mumwe munhu akaedza kuvashandisa kupinda mumaakaundi avo kubva kunzvimbo dzisingazivikanwe.
ari email zviziviso Vanotaura zvakare kuti kuedza kwekubatanidza kwakavharwa nekuti Vakagadzirwa kubva kunzvimbo dzisingazivikanwi munyika.
"Mumwe munhu achangoshandisa password yako kuyedza kupinda muakaundi yako kubva kune mudziyo kana nzvimbo yatisingazive," inoyambira yekuzivisa. "LastPass yakavharira kuedza uku, asi iwe unofanirwa kunyatso tarisa. Ndiwe here? «
Mishumo yekukanganiswa LastPass master passwords inoparadzirwa kuburikidza neakasiyana siyana masocial media masaiti uye online mapuratifomu, kusanganisira Twitter.
Mishumo yakawanda zvinoita kunge zvinobva kune vashandisi vane yekare LastPass account, zvinoreva kuti havana kushandisa sevhisi kwenguva uye havana kushandura password. Imwe yefungidziro yakaitwa panguva iyoyo yaive yekuti rondedzero yemapassword akashandiswa inogona kunge yakabva kune yakapfuura hack.
Vamwe vashandisi vanoti kuchinja mapassword avo hakuna kuvabatsira, uye mumwe mushandisi akati anoona kuedza kutsva kwekupinda kubva kunzvimbo dzakasiyana siyana neshanduko yega yega password.
LastPass yakaongorora mishumo ichangoburwa yekuti vakavharisa kuyedza kupinda uye vakaona kuti chiitiko ichi chine chekuita nezvimwe zvinowanzoitika mu bot, umo mutambi kana mutambi ane hutsinye anoedza kuwana maakaundi evashandisi (munyaya iyi, LastPass). kubva kutyora bato rechitatu kune mamwe masevhisi asina hukama ”.
"Zvakakosha kuziva kuti isu hatina chinoratidza kuti maakaundi akabudirira kuwanikwa kana kuti sevhisi yeLastPass yakakanganiswa nebato risina mvumo. Isu tinogara tichiongorora rudzi urwu rwechiitiko uye ticharamba tichitora matanho akagadzirirwa kuona kuti LastPass, vashandisi vayo uye data ravo vanoramba vakachengetedzwa uye vakachengeteka, "akawedzera Bacso-Albaum.
Zvisinei, iyo Vakabvunzurudzwa vashandisi vakagamuchira yambiro iyi vakati mapassword avo akasiyana neLastPass uye hadzishandiswe kumwe kupi zvako. Ndosaka mumwe mushandisi weInternet akashamisika "Saka vakawana sei aya ekupedzisira LastPass password pasina LastPass kutyorwa?" »
Nepo LastPass isina kugovera chero ruzivo rwemaitirwo evaiti vane hutsinye vari kumashure kwekuyedza kuvharisa zvinhu, vaongorori vezvekuchengetedza Bob Diachenko vakati ichangobva kuwana zviuru zvemashoko.
Vamwe vevatengi veLastPass vakagamuchira zviziviso zvekubatanidza zvakadaro vakaratidza kuti maemail avo haasi pane rondedzero yekubatanidza mapeya akaunganidzwa neRedLine Stealer akawanikwa naDiachenko.
Mukuwedzera, iye pachake akaratidza kuti izvi hazvisi izvo zvakakonzera kurwisa:
“Zvakanaka, ndatambira zvikumbiro zvishoma zvekutarisa maemail muRedLine Stealer logs, uye hapana. Akanga asina pakanyorwa. Saka zviri pachena kuti handiyo kwaibva kurwiswa (zvinosuruvarisa, nekuti izvo zvingadai zvakaita kuti vector ive nyore kunzwisisa).
Izvi zvinoreva kuti, kana mune mamwe emashoko aya, vanoita hutsinye vari seri kwekuedza kwekutora. Vakashandisa dzimwe nzira dzekuba mapassword kubva kune vavanoda.
Vamwe vatengi vataurawo kuti vakachinja master password yavo sezvo vakagamuchira yambiro yekupinda, kungogamuchira imwe chenjedzo mushure mekunge password yachinjwa.
"Mumwe munhu akaedza kuisa my LastPass master password nezuro, uye mumwe munhu akaedza zvakare maawa mashoma mushure mekunge ndachinja. Chii chiri kuitika ? «
Kuti zvinhu zvitonyanya kuipa, vatengi vakaedza kudzima uye kudzima maakaunti avo eLastPass mushure mekugamuchira yambiro iyi zvakare vanoshuma kugamuchira "Chimwe chinhu chakashata" mushure mekudzvanya bhatani rekuti "Delete".
Nepo LastPass isati yakanganiswa, vashandisi veLastPass vanokurudzirwa kugonesa multi-factor kuvimbiswa kuchengetedza maakaundi avo.
Pane saiti yayo, LastPass inotsanangura:
"Multi-factor authentication (MFA), ine-one-touch notification (OneTap) panhare, makodhi anotumirwa neSMS kana kusimbiswa kweminwe, inopa chikamu chechipiri chekuchengetedza kuratidza kuzivikanwa kwemushandisi usati wavapa mukana. NeMFA, vatungamiri vanogona kuisa mitemo yechokwadi inotevedzera mitemo yekuchengetedza pasina kukanganisa nguva yevashandi kana basa. LastPass MFA inodarika zvechinyakare-zviviri-chinhu chokwadi kuti ive nechokwadi chekuti vashandisi vakakodzera vanowana iyo data chaiyo panguva chaiyo.