Nerd News: LastPass Back Up

LastPass has been down for a while, but according to LastPass and other reports it should be back up, though there may still be some issues.

Sounds like they only use 2 datacenters, or maybe even only single primary one with a "backup".

"Update: 1:28 pm EST

Though one of our data centers remains completely down, the service is generally stable and should be available to the majority of users (with the exception of login favicons). Some users may see connection errors but should still be able to access their data. We continue to work as quickly as possible to get the service back to 100%. "

       Source http://blog.lastpass.com/

"Aug 12, 2014 - One of LastPass' datacenters has been down since 3:57am EDT. The service is now running fully off one Herndon VA datacenter and we have been engaged with our provider all morning. Currently favicons/sprites are impacted. We are doing what we can to minimize the impact and apologize for the inconvenience. "

       Source https://lastpass.com/status.php


Also http://www.isitdownrightnow.com/lastpass.com.html 

For LastPass users that want an offline solution to prevent this type of problem in future consider LastPass Pocket

This is LastPass link specifically about offline access https://helpdesk.lastpass.com/password-manager-basics/your-lastpass-vault/offline-access-to-your-lastpass-vault/ 

Updated oclHashcat-plus v0.15

Main link:  http://hashcat.net/oclhashcat-plus/

oclHashcat-plus v0.15 "Added support for cracking passwords longer than 15 characters," lot of other improvements see https://hashcat.net/forum/thread-2543.html for full details.

I am still digging through the changes, and I have been sick, so it will probably take me a while, but it looks like some big improvements have been made.

They have also added support for several algorithms, including TrueCrypt 5.0+, Lastpass, & MacOSX v10.8 that are of particular interest to me.

Apple adds 2 Step Verification (2 Factor Authentication) for Apple ID

This is big Security News, Apple has finally followed Google and others in having a Two Step (I think of it as 2 Factor) Security option.

Note, this appears to be true Two Factor, even if you are trying to recover lost password, you will still need a minimum of two of the 3 following: 

• Apple ID password
• Trusted Device [ SMS capable phone OR iOS device with Find My iPhone enabled]
• Recovery Key [14 digit Recovery Key Apple provides, they say print and keep in a safe place]

This has both a Pro, since it will be very hard for someone to Hack if your using strong a password.

As well as a Con, if you forget or lose 2 of those 3 things, you will be locked out of your Apple account forever, and would have to get a new one.

You can have multiple Trusted Devices though, and there is no reason you can't have a couple of hard copies of the Recovery Key in safe deposit box and home or office safe.

And if you use a good Password Keeper, also known as Password Manager, like LastPass https://lastpass.com/ you only need to remember one good password.

Reference Links:

• Apple ID: Frequently asked questions about two-step verification for Apple ID:  http://support.apple.com/kb/HT5570
• Apple ID: Can't sign in with two-step verification:  http://support.apple.com/kb/HT5577
• [Trusted Devices] Apple ID: About SMS and two-step verification:  http://support.apple.com/kb/HT5593
• Turning off two-step verification for your Apple ID:  http://support.apple.com/kb/HT5631