On: What’s in a PR statement: LastPass breach explaine...

[snotrockets]

Assume the function is a cryptographically appropriate hash function, you can reduce the risk of suggested attack to almost nil, considering the number of inputs you'd need for such attack