Top all-time · #12103
Pepe Berba
Personal blog · pberba.github.iosecurity
Pepe Berba writes pepe berba, a personal blog at pberba.github.io about security. Since 2020, 6 different Hacker News readers have linked it 6 times, most often “Bypassing LastPass’s “Advanced” YubiKey MFA: A MITM Phishing Attack”. It is still writing: the last post was on 2026-10-20, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN commenters link this 2020 post on a LastPass phishing attack while discussing the later LastPass breach. The comment uses it as a reference for how the attack worked, not to judge the writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
stats, security, and crypto
Most-linked posts?
- Bypassing LastPass’s “Advanced” YubiKey MFA: A MITM Phishing Attack3 people · 3 mentions · first linked 2020-05-29
What Hacker News says?
https://pberba.github.io/security/2020/05/28/lastpass-phishi... From what I can tell, all of lastpass mfa options are based around some form of otp not webauthn. We tested the above in our own environment, since we had control of the devices we did not need urls to do it. We just grabbed the data locally to confirm if it was true. At the time lastpass told us webauthn was in the pipeline so we stayed.
Comment linking /security/2020/05/28/lastpass-phishing/
on “LastPass says DevOps engineer’s hacked computer led to security breach in 2022”Submitted Hunting for Persistence in Linux (Part 5): Systemd Generators as a story · 18 points
HN discussionSubmitted Bypassing LastPass’s “Advanced” YubiKey MFA: A MITM Phishing Attack as a story · 3 points
HN discussionSubmitted LastPass doesn’t support U2F for hardware keys as a story · 2 points
HN discussionSubmitted U2F with Duo Web Phishable by Default as a story · 2 points
HN discussionSubmitted Hunting for Persistence in Linux: Auditd, Sysmon, Osquery (and Webshells) as a story · 1 points
HN discussion