Hacker News Reader

> Following the incident, LastPass has taken a number of steps to prevent future attacks and investigate what happened. The engineer was assisted in strengthening the security of their personal network [...]

I hope this involved something along the lines of: "This zoom meeting won't end until you update your router firmware".

View on HN

I'm fascinated that this was part of their remediation. I'd consider "don't trust the employee's local network" to be a pretty basic principle of modern corporate information security. What happens when an employee logs in from hotel wifi? You basically have to treat the network between the user and your environment as hostile, and design for that problem.

And as an employee, "don't trust the company's local network" with your own devices either.

For my personal devices, I trust my company's local network essentially the same as any other network my mobile devices connect to.

Reply on news.ycombinator.com