Add your comments
DLS Archives
May 2013
| Sun | Mon | Tue | Wed | Thu | Fri | Sat |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | 4 | |||
| 5 | 6 | 7 | 8 | 9 | 10 | 11 |
| 12 | 13 | 14 | 15 | 16 | 17 | 18 |
| 19 | 20 | 21 | 22 | 23 | 24 | 25 |
| 26 | 27 | 28 | 29 | 30 | 31 | |
Essential Windows Apps | Do Not Track | Microsoft Office | SayNow | LibreOffice | Zeam Android Launcher | Dead Space iPhone | Firefox 4 Mobile | Firefox 4 Release | PlayStation iPhone App | Excel Tips | Android Launcher | Google One Pass | Dead Space | Google Cloud Print | Songbird for Android | NBA Jam | Internet Explorer 9 | Windows 7 Connector for Mac | Office Mac 2011 | IE9 RC
Reader Comments (Page 1 of 1)
(Unverified)Aug 23rd 2008 12:22PM
I find it highly unusual that they don't authenticode sign their executable. For a service that's hoping to store your passwords, there is no excuse for not getting a code signing certificate and using that to digitally sign their downloads so that you know it's not from a bad guy.
It costs about $100 do code sign an application.
http://www.shahine.com/omar/AuthenticodeSigning.aspx
Once they code sign LastPass.exe I'll give it a try as it looks like a promising service.
(Unverified)Aug 23rd 2008 1:48PM
I got a reply from LastPass that they are working on authenticode signing their application.
(Unverified)Aug 23rd 2008 9:49PM
While we've been working on authenticode for a while, we specifically made the download URLs https (using SSL), so that you could be sure it was coming from LastPass; please ensure you do not download from anywhere but the https://lastpass.com/ website.
Thanks,
Joe
(Unverified)Sep 8th 2008 12:29PM
Thought I'd mention that authenticode signing for our Download EXE as well as our Firefox XPIs came out with version 1.29, we had wanted to come out with this from the start but spent a month in the review process (it's much simpler as an individual than a new business).