News for hackers. Stuff that matters.

A comment on 1Password sends your password in clear text across the loopback interface. Parent comment

Re:1Password sends your password in clear text across the lo... by CiPHPerCoder on Wednesday March 02, 2016 @02:35PM (#11212382)
"Let's throw encryption at the problem" isn't always wise.

For example: https://paragonie.com/blog/2015/09/comprehensive-guide-url-p...

What do you need to do before you can sniff a loopback interface?

[ Parent | on HN ]
Re:1Password sends your password in clear text across the lo... by ikeboy on Wednesday March 02, 2016 @02:48PM (#11212472)
http://arxiv.org/abs/1505.06836

You can run as a regular user (or even sandboxed) and connect to the interface without authentication.

[ Parent | on HN ]