1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

LastPass Password Manager DataCenter Down

Discussion in 'General Chit Chat' started by Howerd, Aug 12, 2014.

  1. Howerd
    Offline

    Howerd Well-Known Member Trusted Member Lifetime Member

    Those that use LastPass may well have had a problem today - not being able to log into your account, except in offline mode (assuming offline mode was enabled)

    The problem related to a DataCenter which went down; LastPass don't seem to use distributed data centers and puts all its eggs in one basket. LastPass claimed that the problems only affected a small number of users, even though lastpass.com has been unavailable for several hours.

    Some people are complaining that when they eventually log in, they find their accounts empty or all the passwords missing. I have eventually managed to log in and all seems OK but it is a big worry that this may have caused my a data breach, though LastPass say this is not the case.

    LastPass is offered free to consumers but there is an enterprise version which has also been affected by this problem. It cannot be acceptable that LastPass does not use geographically distributed centers for such a crucial system.

    Many will be re-thinking whether to use password managers at all.
  2. Dave_E
    Offline

    Dave_E Well-Known Member Trusted Member

    Best idea is to use the same password for every site.

    No, just kidding :D
  3. Howerd
    Offline

    Howerd Well-Known Member Trusted Member Lifetime Member

    If LastPass is hacked, that is worse than using the same password on every website, since you know exactly what websites someone uses, what their usernames are, as well as their passwords!
  4. walesrob
    Offline

    walesrob Administrator Staff Member

    The idea of trusting any company to all of my online passwords fills me with horror. I don't care how good the encryption is, or whether (or not, as with Lastpass) they have servers all over the world, no-one gets my passwords.
  5. Anon04576
    Offline

    Anon04576 Well-Known Member

    I wouldn't disagree but I do have sensitive data (passwords and bank details) that I have encrypted locally and then uploaded to a trustworthy encrypted data storage company (spideroak.com). Which in theory is no less safe than storing on a USB device according to the latest Black Hat conference - http://www.wired.com/2014/07/usb-security/)
  6. oss
    Offline

    oss Somewhere Staff Member

    There is one and only one system that I trust with my wide range of passwords and I'm not telling :D
  7. Dave_E
    Offline

    Dave_E Well-Known Member Trusted Member

    Apparently the problem was due to some issue with the BGP routing table size limit, seemingly due to a hard coded size limit of 512,000. It also affected other sites such as e-bay.

    link ==> How an arbitrary number broke the internet yesterday.

    Just thought you might like to know ;)
  8. Anon04576
    Offline

    Anon04576 Well-Known Member

    I'm not so sure on the word arbitrary in the title. Assuming it was 512k, that's not arbitrary in computing terms. I will however sleep better tonight know knowing the issue :D

Share This Page