LastPass: Notice of Security Incident
For all of its warts, at least crypto has managed to come up with a clever little motto that correctly states the issue, in the form of &quot;not your keys, not your crypto.&quot;<p>Putting your passwords in the hands of a third party <i>drastically</i> increases your threat surface and no amount of hand-wavy &quot;but it&#x27;s not as convenient&quot; will change this fact.<p>Now, it may be true that the convenience factor is very strong right now, but the solution will never be &quot;let&#x27;s keep hoping real hard that the third parties are good at this.&quot; Not unless any of the third parties are willing to take on indemnification or liability.<p>The proper thing to do is to figure out how we can best empower people on their own. I know it&#x27;s difficult, but that doesn&#x27;t fundamentally cut into the fact that &quot;this is what SHOULD be done.&quot;