OneLogin Hacked

[SpuffMonkey]

Personally I've always thought it a bit daft to store passwords etc online - what could be a more appealing place to hack?

 

https://techcrunch.com/2017/06/01/onelogin-admits-recent-breach-is-pretty-dang-serious/

[Garacesh]

Personally I've always thought it a bit daft to store passwords etc online - what could be a more appealing place to hack?

Same reason I use KeePass, not LastPass. My computer in of itself isn't really an attractive target. Even if my machine is compromised, it's probably easier just to keylog me than it is to break the password database.

A cloud service brimming with username/password combos? If I were a hacker, I'd be frothing at the mouth to get a bite out of that.

[ZeroHour]

Onelogin doesn't really work the same way as last pass though. It was more for sso credentials so a lot was not going to be encrypted clientside like last pass. Nothing is unencrypted on last pass servers and it's all done clientside.