SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: vireya who wrote (90560)9/1/2015 11:03:46 AM
From: lrb3 Recommendations

Recommended By
goldworldnet
Ken Adams
vireya

  Respond to of 110653
 
Vireya,

the question now is, how much exposure do I have...having used it, then disabled and removed it from MY puter
I do not know how much exposure you have. All I can think of to ease your mind is to suggest that you change your password at each site you told LastPass about.

Everyone has a different fear threshhold. When I was told of the LastPass hack, I was satisfied to change my master password and continue with business as usual. Some might consider this a foolish attitude, but it is the way I am.

I think these discussions of the risks and benefits associated with various password schemes are helpful to everyone, regardless of which approach one chooses.

LRB



To: vireya who wrote (90560)9/1/2015 11:07:07 AM
From: LTBH1 Recommendation

Recommended By
vireya

  Read Replies (2) | Respond to of 110653
 
Not LRB, but Last Pass claims "According to LastPass, the authentication hashes should be sufficiently encrypted to prevent anyone from using them to access your account."

However:"the intruders did take LastPass account email addresses, password reminders, server per user salts, and authentication hashes. The latter is what’s used to tell LastPass that you have permission to access your account."

For me, since I believe you cannot always believe everything any given company proclaims RE its business AND since encrypted hashes can and have been decrypted in the past AND since I attempt to play safe with things that are within my control ..... I would change all my passwords and open a new email account/close the old one.

The biggest hassle will probably be the new email addie if you have multiple business/friends tied to it because you will need to edit the addie on their sites also.

Luck
LTBH

FWIW, I would say I am an extra cautious person when it comes to the internet and security:

I use:
a hardware firewall, router
the number one PC firewall, Comodo (free)
the number one active virus scanner, Bitdefender (paid version but also available as free)
run SuperAntiSpyware (free) multiple times a week to remove tracking cookies
run Malwarebytes (free) as an on demand virus scan several times a week
use SpywareBlaster (free) for its kill byte protection
use FF with NoScript, AdBlockPlus, Better Privacy extensions
Use FF with Flash set to always ask first
use Roboform (free) version set to only store passwords on my PC .... NOT the cloud



To: vireya who wrote (90560)9/1/2015 5:30:58 PM
From: lrb1 Recommendation

Recommended By
vireya

  Respond to of 110653
 
the question now is, how much exposure do I have...having used it, then disabled and removed it from MY puter
Vireya,

Not sure from what you wrote whether you just removed the LastPass extension from your browser, or did you actually tell LastPass to delete your account and erase all of your data from their servers. If not the latter, you should visit lastpass.com or, if you do not recall the password you used with LastPass, lastpass.com, to instruct LastPass to erase all your data.

This comes from the "Uninstalling and deleting" section of the LastPass user manual pointed at by Eric L.'s post: Message 30215663