[ajb]

No, they say "As a result, we have adjusted our security alert systems and this issue has since been resolved."

They are claiming they know what the bug was.

[joenathanone]

They *need* to go into great detail if people are supposed to trust them with their digital life. That statement isn't nearly enough.

[foobiekr]

After all the problems with lastpass, who was even trusting them at this point?

[ajb]

My employer tried to move off them 2 years ago and didn't manage it.

The problem is the year subs. To avoid wasting money you need to do it at the end of a year, but you also need to get your users trained up before the switch. We hit a complication and ran out of time and so had to re-up.

[hsbauauvhabzb]

Surely the cost of the subs is trivial compared to the cost of training users etc?

[joenathanone]

I could see if you were a big company, trying to migrate a bunch of users and retrain them on a new password manager would be costly, there are probably admins out there looking for any reason not to make the move, but at this point, I think they have lost all credibility.

[ajb]

Yeah absolutely.

[mcguire]

Not necessarily. That could be read as them simply turning off the alerts (ideally, until they figure out and fix the bug).

[ajb]

Eurgh, I suppose it could mean that. Very misleading if so.