Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
DrewHintz
on Jan 17, 2016
|
parent
|
context
|
favorite
| on:
Phishing attack against Lastpass
> LastPass also detects you enter your master password on an incorrect domain and notifies you immediately of your mistake
Interesting! How does it do this?
willidiots
on Jan 17, 2016
[–]
I'm assuming by the same mechanism that offers to save previously-entered passwords. It's always sniffing anything you type into a password field.
TwoBit
on Jan 17, 2016
|
parent
[–]
How would it know it's a password field and not just some text input box that uses * characters?
joshschreuder
on Jan 17, 2016
|
root
|
parent
[–]
<input type="password" /> I assume
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Interesting! How does it do this?