Filippo Valsorda :go:#LastPass is being deservedly criticized for using PBKDF2-HMAC-SHA256 with a number of iterations that is 3x lower than the OWASP recommendation, but there's much worse here IMHO.
First, 1Password's design with a random secret key or iCloud Keychain's with HSM wrapping would have prevented cracking altogether.
Second, they did not upgrade legacy hashes (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#upgrading-legacy-hashes), so the iteration count on my old account was actually 5,000, 62 TIMES lower than the recommendation.
All GNU social JP content and data are available under the