Ndị mmepe nke njikwa okwuntughe LastPass, nke ihe karịrị nde mmadụ 33 na ihe karịrị ụlọ ọrụ puku 100 na-eji, gwara ndị ọrụ ihe merenụ n'ihi nke ndị na-awakpo jisiri ike nweta akwụkwọ nkwado ndabere nke nchekwa na data nke ndị ọrụ ọrụ. . Data ahụ gụnyere ozi dị ka aha njirimara, adreesị, email, ekwentị na adreesị IP nke esi na ya nweta ọrụ ahụ, yana aha saịtị ezoro ezo nke echekwara na paswọọdụ njikwa na nbanye, okwuntughe, data ụdị na ndetu maka saịtị ndị a echekwara na ezoro ezo. ụdị .
Iji kpuchido nbanye na okwuntughe maka saịtị, ejiri igodo 256-bit mee ihe na-ezo AES site na iji ọrụ PBKDF2 dabere na paswọọdụ nna ukwu mara naanị maka onye ọrụ, yana obere mkpụrụedemede iri na abụọ. A na-eme ezoro ezo na decryption nke logins na okwuntughe na LastPass naanị n'akụkụ onye ọrụ, a na-ewerekwa ịkọ nkọ paswọọdụ siri ike na ngwaike ọgbara ọhụrụ, n'ihi nha paswọọdụ nna ukwu yana ọnụ ọgụgụ PBKDF12 iterations ejiri.
Iji mee mwakpo ahụ, ha jiri data nke ndị mwakpo ahụ nwetara n'oge mbuso agha gara aga mere n'August ma mee ya site na nkwenye nke akaụntụ nke otu n'ime ndị mmepe ọrụ. Mbanye anataghị ikike August mere ka ndị na-awakpo nweta ohere na gburugburu mmepe, koodu ngwa, na ozi teknụzụ. O mechara pụta na ndị na-awakpo ahụ na-eji data sitere na gburugburu ebe mmepe ahụ wakpoo onye nrụpụta ọzọ, n'ihi nke a mere ka ha nweta igodo ohere nke nchekwa igwe ojii na igodo iji decrypt data sitere na arịa ndị echekwara n'ebe ahụ. Sava igwe ojii ahụ mebiri emebi kwadoro nkwado ndabere zuru oke nke data ọrụ mmepụta.
isi: opennet.ru