More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

  • tony@lemmy.hoyle.me.uk
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    1
    ·
    1 year ago

    It’s encrypted on the client and bitwarden themselves can’t decrypt it (we assume, but there have been audits that seemed to confirm that).

    If you want to you can just run your own server then they can’t see the traffic at all.

    • RealHonest@lemmy.one
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      16
      ·
      1 year ago

      Who’s we? You probably mean you assume. Bitwarden is open source so an assumption need not be made.

      • Mananasi@feddit.nl
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        There’s an assumption that the code you see is the code running on their server. And on top of that there’s lots of other software running on their servers.