Hacker News new | ask | show | jobs
by SippinLean 3456 days ago
LastPass prompts every time before autofilling your CC# into a form, so it might avoid this issue in that case.

I do believe it would still fail exposing your basic info, such as in this example, however.

2 comments

Basic info is more critical than credit card numbers, at least in my country (Australia) where the issuer or merchant would be liable for any subsequent fraudulent transactions; at worst I would be inconvenienced a few days whilst a new card & number was issued. Compared to outright identity theft, that's minor.
LastPass has previously had autofill exploits (not with regards to CC though). I would highly recommend disabling auto-fill.