Comment by tuwtuwtuwtuw

> I remember when lastpass had a security hole that could expose every password in your vault by visiting a web page.

I remember when KeePass browser plugin had the same issue. The security researchers were not paid.