[paulpauper]

AES CBC not broken, but it's likely LastPass implementation of AES was bad , such as bad RNG or other possible problems.

[rosnd]

Why do you think it is likely? That's a very strong claim.

> such as bad RNG

How could that be a problem? The attacker doesn't control your passwords. How would you exploit a known IV as an attacker in this context?

[paulpauper]

there are many ways the encryption could have been implemented badly. a weak RNG is one

[bbbbb5]

Do you actually know anything about this subject, or are you just speculating?

[paulpauper]

faulty implementation of crpyto is not unheard of. it happens a lot.

[bbbbb5]

Yes, but how exactly is the LastPass implementation faulty? In your other comment you claim to know that it is.