Weekly Digest #95

Articles

How did LastPass master passwords get compromised?

• Credential stuffing
• Phishing
• Malware
• LastPass compromise
• Pass the hash, a hacking technique that allows an attacker to authenticate to a remote server or service by using the underlying NTLM or LanMan hash of a user’s password, instead of requiring the associated plaintext password as is normally the case. It replaces the need for stealing the plaintext password to gain access with stealing the hash. The attack exploits an implementation weakness in the authentication protocol, where password hashes remain static from session to session until the password is next changed.

How To Be Successful

1. Compound yourself, You don’t want to be in a career where people who have been doing it for two years can be as effective as people who have been doing it for twenty — your rate of learning should always be high
2. Have almost too much self-belief
3. Learn to think independently
4. Get good at “sales”. All great careers, to some degree, become sales jobs. You have to evangelize your plans to customers, prospective employees, the press, investors, etc. This requires an inspiring vision, strong communication skills…