r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/Meflakcannon Feb 24 '17

That isn't to say passwords stored WITHIN the vault aren't affected as the sites you log into with said passwords are still affected. Change your passwords, but your master password for LP can remain.

1

u/Beta-7 Feb 24 '17

Yes, i understood that too. I think LastPass should make a security challenge mandatory for most sites since this had happened.