LastPass autofill exploit
Please correct me if I am mistaken, but couldn&#x27;t this have been implemented into an iframe that when ran could send the passwords to another remote server?<p>If so, I am a little taken back by LastPass only offering $1,000 to the researcher that found and reported it for fixing. He or she could have taken a different path and resulted in this being used in some complex targeted attack against tech corporations via short-url redirect interstitial pages, or an ad network&#x27;s javascript, etc. Given the potential damage, I&#x27;d say there is a missing zero or two on that reward amount, in my opinion.