Troed Sångberg on Nostr: This would be the _single round_ hashed somewhat bad Master password users I assume ...

This would be the _single round_ hashed somewhat bad Master password users I assume though*? Those should indeed be bruteforceable.

Somewhat surprised users didn't understand that when LastPass did communicate about the single round hashing etc - they could've just moved their crypto to another seed :/

I know someone in cybersec who has on purpose left some small amounts of bitcoin in a wallet where the seed existed in their LastPass account at the time. Those coins are still there - but the user had a strong Master password.

*) if my memory serves me right