Вскоре после попытки шантажа от LastPass пришли очень интересные новости, которые могут заставить пересмотреть свое решение пользоваться их Premium сервисом даже самых ленивых и тяжелых на подъем пользователей.
Немецкий security researcher Mike Kuketz исследуя мобильное приложение LastPass обнаружил там 7 треккеров пользователей! СЕМЬ!
Further inspection doesn’t suggest that the trackers transferred any username or password data, but it does seem to know when the user creates a password and what type. Kuketz says that including a tracking code of this type in a password manager (or similar security-focused app) isn’t acceptable, as the developers can’t be fully aware of what the tracking code collects. That’s because trackers often use proprietary code that isn’t open for inspection.
The amount of data does seem to be extensive, revealing information about the device in use, the cell phone carrier, the type of LastPass account, and the user’s Google Advertising ID (used to connect data about the user across apps). It’s enough data to build an extensive profile around the most private information you store.
Подробности:
- The LastPass Android App Contains 7 Trackers From Third Party Companies
- LastPass Android app tracking users, says researcher
- LastPass Android app has some sneaky tracking software hidden away
Ориентируясь на кол-во трекеров в аналогах, я буду выбирать между Bitwarden или 1Password, либо посмотрю что-то self-hosted.
