2017/09/13 12:05:25:379 WPAnalytics session started
2017/09/13 12:05:25:393 Helpshift Enabled
2017/09/13 12:05:25:824 User-Agent set to: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Mobile/14G60 wp-iphone/8.3
2017/09/13 12:05:27:149 Device Token received in didRegisterForRemoteNotificationsWithDeviceToken: 4d5649ecd7a9acff32855f0fb6c70f7ec426b4e0efc84069d471291921dd93bf
2017/09/13 12:05:27:255 Updated person <WordPress.ManagedPerson: 0x174289920> (entity: Person; id: 0xd000000001000012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p64> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/75f5b759ccdec5bb500fc4432955b3ca";
creationDate = "2017-09-12 14:53:55 +0000";
displayName = "Chilleh Penguin";
firstName = Chilleh;
isSuperAdmin = 0;
kind = 0;
lastName = "";
linkedUserID = 35063852;
role = administrator;
siteID = 18033618;
userID = 35063852;
username = dailyddose;
})
2017/09/13 12:05:27:255 Updated person <WordPress.ManagedPerson: 0x174289a60> (entity: Person; id: 0xd000000000040012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p1> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/ff394455f5a7503a3ab7eb1b62fccb87";
creationDate = "2017-09-06 09:07:06 +0000";
displayName = "Chilly II";
firstName = "Chilly II";
isSuperAdmin = 0;
kind = 0;
lastName = Penguin;
linkedUserID = 18647202;
role = administrator;
siteID = 18033618;
userID = 18647202;
username = powersthatbeat;
})
2017/09/13 12:05:27:328 Successfully registered Device ID 20675825 for Push Notifications
2017/09/13 12:05:28:066 PingHub connecting
2017/09/13 12:05:28:364 PingHub connected
2017/09/13 13:02:59:760 WPAnalytics session started
2017/09/13 13:02:59:771 Helpshift Enabled
2017/09/13 13:03:00:056 User-Agent set to: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Mobile/14G60 wp-iphone/8.3
2017/09/13 13:03:01:015 Device Token received in didRegisterForRemoteNotificationsWithDeviceToken: 4d5649ecd7a9acff32855f0fb6c70f7ec426b4e0efc84069d471291921dd93bf
2017/09/13 13:03:01:110 Updated person <WordPress.ManagedPerson: 0x1704925c0> (entity: Person; id: 0xd000000001000012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p64> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/75f5b759ccdec5bb500fc4432955b3ca";
creationDate = "2017-09-12 14:53:55 +0000";
displayName = "Chilleh Penguin";
firstName = Chilleh;
isSuperAdmin = 0;
kind = 0;
lastName = "";
linkedUserID = 35063852;
role = administrator;
siteID = 18033618;
userID = 35063852;
username = dailyddose;
})
2017/09/13 13:03:01:110 Updated person <WordPress.ManagedPerson: 0x170492700> (entity: Person; id: 0xd000000000040012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p1> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/ff394455f5a7503a3ab7eb1b62fccb87";
creationDate = "2017-09-06 09:07:06 +0000";
displayName = "Chilly II";
firstName = "Chilly II";
isSuperAdmin = 0;
kind = 0;
lastName = Penguin;
linkedUserID = 18647202;
role = administrator;
siteID = 18033618;
userID = 18647202;
username = powersthatbeat;
})
2017/09/13 13:03:01:172 Successfully registered Device ID 20675825 for Push Notifications
2017/09/13 13:03:02:238 PingHub connecting
2017/09/13 13:03:02:687 PingHub connected
2017/09/13 13:03:43:755 PingHub disconnecting
2017/09/13 13:03:43:772 PingHub connecting
2017/09/13 13:03:44:016 PingHub connected
2017/09/13 13:08:21:615 Pushing Notification Details for: [3066878794]
2017/09/13 13:08:47:853 Successfully unapproved comment 18033618.11846
2017/09/13 13:08:47:853 Invalidating Cache and Force Sync'ing Notification with ID: 3066878794
2017/09/13 13:08:50:184 Successfully approved comment 18033618.11846
2017/09/13 13:08:50:185 Invalidating Cache and Force Sync'ing Notification with ID: 3066878794
2017/09/13 13:09:43:163 Updated person <WordPress.ManagedPerson: 0x170a94140> (entity: Person; id: 0xd000000001000012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p64> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/75f5b759ccdec5bb500fc4432955b3ca";
creationDate = "2017-09-12 14:53:55 +0000";
displayName = "Chilleh Penguin";
firstName = Chilleh;
isSuperAdmin = 0;
kind = 0;
lastName = "";
linkedUserID = 35063852;
role = administrator;
siteID = 18033618;
userID = 35063852;
username = dailyddose;
})
2017/09/13 13:09:43:165 Updated person <WordPress.ManagedPerson: 0x170891490> (entity: Person; id: 0xd000000000040012 <x-coredata://DBD28BC7-0976-4A60-89CF-8FF0CF11355F/Person/p1> ; data: {
avatarURL = "https://secure.gravatar.com/avatar/ff394455f5a7503a3ab7eb1b62fccb87";
creationDate = "2017-09-06 09:07:06 +0000";
displayName = "Chilly II";
firstName = "Chilly II";
isSuperAdmin = 0;
kind = 0;
lastName = Penguin;
linkedUserID = 18647202;
role = administrator;
siteID = 18033618;
userID = 18647202;
username = powersthatbeat;
})
2017/09/13 13:10:59:477 Pushing Notification Details for: [3060986699]
2017/09/13 13:15:08:098 GravatarService.uploadImage Success!
2017/09/13 13:24:37:053 PingHub disconnecting
2017/09/13 13:24:37:261 PingHub disconnected
2017/09/13 13:24:37:894 PingHub connecting
2017/09/13 13:24:38:252 PingHub connected
2017/09/14 01:31:04:074 WPAnalytics session started
2017/09/14 01:31:04:088 Helpshift Enabled
2017/09/14 01:31:04:344 User-Agent set to: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Mobile/14G60 wp-iphone/8.3
2017/09/14 01:31:04:774 PingHub connecting
2017/09/14 01:31:04:926 Device Token received in didRegisterForRemoteNotificationsWithDeviceToken: 4d5649ecd7a9acff32855f0fb6c70f7ec426b4e0efc84069d471291921dd93bf
2017/09/14 01:31:05:833 Successfully registered Device ID 20675825 for Push Notifications
2017/09/14 01:31:05:890 PingHub connected
2017/09/14 01:33:07:322 Received push notification:
Payload: {
aps = {
badge = 0;
sound = "<null>";
};
type = "badge-reset";
}
2017/09/14 01:33:07:322 Current Application state: 0
2017/09/14 01:33:07:847 Received push notification:
Payload: {
aps = {
badge = 0;
sound = "<null>";
};
type = "badge-reset";
}
2017/09/14 01:33:07:847 Current Application state: 0
2017/09/14 01:34:33:432 Received push notification:
Payload: {
aps = {
badge = 0;
sound = "<null>";
};
type = "badge-reset";
}
2017/09/14 01:34:33:432 Current Application state: 0
2017/09/14 01:34:43:994 Received push notification:
Payload: {
aps = {
badge = 0;
sound = "<null>";
};
type = "badge-reset";
}
2017/09/14 01:34:43:994 Current Application state: 0
2017/09/14 01:34:46:700 Pushing Notification Details for: [3024333298]
2017/09/14 01:36:46:613 PingHub disconnecting
2017/09/14 01:36:47:194 PingHub disconnected
2017/09/14 05:03:47:931 WPAnalytics session started
2017/09/14 05:03:47:947 Helpshift Enabled
2017/09/14 05:03:48:354 User-Agent set to: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Mobile/14G60 wp-iphone/8.3
2017/09/14 05:04:09:713 Device Token received in didRegisterForRemoteNotificationsWithDeviceToken: 4d5649ecd7a9acff32855f0fb6c70f7ec426b4e0efc84069d471291921dd93bf
^ed
LastPass admits it's been hacked again
Password manager LastPass has admitted that its servers have been hacked for the second time in four years. However, the company insists there is no evidence that the hackers have made off with users' passwords.
In a blog post on the company's website, the LastPass CEO says the thieves managed to gain access to account email addresses, password reminders and authentication hashes. Those hashses could potentially be used to work out customers' master passwords, consequently unlocking all the passwords in users' vaults. However, because LastPass uses a particularly strong hashing routine, it's highly unlikely that the thieves will be able to crack many passwords using a brute-force attack, where the hackers attempt every conceivable password combination.
Nevertheless, the company is still taking precautions to protect customers. Anybody signing in from a new device or IP address will have to click a verification link sent by email to confirm they are the genuine account holder, unless they already use two-factor authentication. The company will also be prompting all users to change their master password.
The master passwords that are most susceptible to a brute force attack are weak, dictionary-based entries (such as expert1, password6 or 3456789) or passwords that have been reused on other sites. LastPass is urging customers with such passwords to act quickly, although the CEO says "we are confident that you are safe on your LastPass account regardless".
Security experts agree that LastPass customers need not be too concerned. "As always, don't panic," writes independent security expert, Graham Cluley on his blog. "The sky is not falling. Take sensible steps to better secure your account - LastPass's advice is good."
The big danger is that list of stolen email addresses will be used to perpetrate phishing attacks, in which LastPass customers are hoodwinked into handing over their master password. "Amongst the stolen information appears to have been a database of account email addresses - an opportunity for phishers and identity thieves to commit email-based attacks posing as the password management company," says Cluley. Those phishing emails could be even more effective if the attackers can convince users they are genuine by showing them their password reminder.
LastPass was the victim of a similar attack in 2011, after which it again forced users to change their master passwords and required extra validation when attemtping to access LastPass accounts from new IP addresses. There were no reports of widespread password theft among LastPass customers after that incident.