Hacker News Reader

One one point: This is kind of meaningless and alarmist.

On the other: It says volumes about LastPass's code quality.

It seems to me it says more about their website quality, which is different.

The code quality of their website and the code quality of the application they sell might be two different things, but the overlap between both topics is "code quality", which is what I said.

This is still wrong, you're inferring that the website code and the application code share the same code quality. But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver.

> But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver.

This is an unknown, and we can argue until we're both blue in the face about whether or not information about app A tells you information about app B, if produced by the same company, but you don't know if the same people within said company produced both apps.

But I say that point doesn't really matter: Their quality controls are either lopsided or inadequate. Neither is a good outcome for a security company.

This says they have atleast 8 developers. https://lastpass.com/about-lastpass/

+1

The site probably isn't the application per se, nor where the data is stored.

Reply on news.ycombinator.com