A security researcher with a record of hunting down holes finds a big one that could give hackers access to your online accounts. LastPass says, though, that the flaw has since been fixed.