As a software engineer and long time LastPass user, I've always been an advocate of password managers. With data breaches becoming more and more common these days, it's critical that we take steps to protect ourselves online. However, over the past year LastPass has made some decisions that have made me question their motives and ultimately has recently caused them to lose my business.
Last year LastPass introduced a new redesign of their vault in which they added nice pretty logos of all the sites in your vault.
This got me wondering, if LastPass is encrypting all of my data before it goes to their servers (like they claim) how are they able to show these logos to me when rendering the vault webpage? I turned to my browser's developer tools to find out.
The rest of the story relies fairly heavily on graphics to show what the author is doing. Worth a read to see the process in tracking down the problem.
(Score: 0) by Anonymous Coward on Tuesday January 24 2017, @05:09AM
A few months back they moved all their premium features to the free tier.
I think they started offering a dropbox clone as a purchasable option
But it sounds like they are probably spying on the free users too.