After I posted all that now I see its been posted a while now on the lastpass website. I just noticed. Its still a very interesting video and good publicity for Lastpass. They do talk about what is mentioned in this thread.

They talk about questions mentioned in this thread, but they say nothing even distantly related to the specific request I made, or the question it implied.

Thanks.
C.

Just spilling a pet peeve of mine:

"Military Grade Encryption" is the worst made up term ever used.. It's absolutely meaningless.

Not at all. It means that the patterns produced by the encryption system are as undecipherable and as easily confused with random noise as the military decisions of generals. It represents an extremely high level of gibberosity.

"Military Grade Encryption" is also considerably more meaningful than the word "Wow!" frequently enunciated by Messers Gibson and Laporte. Unless that "Wow!" has negative meaning, "Military Grade Encryption" must therefore be meaningful. Q.E.D.

Can you prove that? I believe that the creation of this message caused the disappearance of several electrons by inverse beta decay.

T
C

I think some of these posts in these forums are just trolls.

I agree with Joe, that with every type of security product, we rely on trust - trust in the people running the system and trust in the equipment being used. How ever, as many has already stated, no one has yet to provide proof of any data packets containing plaintext information (where it should've been encrypted) - which increases my trust in LastPass a great deal.

It could be that my posts are trolls. Or that I am. Or a running dog of the Wall Street imperialists. Or an undesirable element. If there are people on these boards who are capable not only of analyzing my actions when I'm not posting here, but also my motives, far be it from me to argue. When people who know me so well discuss my off-screen behavior and motives, I never argue.

But to get back to a question which has been mentioned or implied all over the Net, including this thread even before it was infiltrated by undesirables, about LastPass and several similar systems, is the statement

"Many people have used various programmer tools to analyze the data being sent back and forth and through their skepticism have helped to verify that the LP team does what they say they do."

true or untrue? If it is true, could someone please post some URLs to the results of these analyses, or at least to some detailed, first-hand information about them?

By the way, if it doesn't already exist, I think that the idea of third-party verification of this type of security claim is an excellent one. Third-party verification is already - for practical purposes - the basis of SSL and quite a few other security-related systems. In fact, it is the basis of quite a bit of corporate law. Why not for this?

T
T