News for hackers. Stuff that matters.

A comment on 1Password sends your password in clear text across the loopback interface. Parent comment

Re:1Password sends your password in clear text across the lo... by msbarnett on Wednesday March 02, 2016 @03:42PM (#11212858)
b) would in general be a lot safer, in that you're elevating one process rather than lowering a privileged interface so that every process you run can sniff it.
[ Parent | on HN ]
Re:1Password sends your password in clear text across the lo... by julie78787 on Wednesday March 02, 2016 @04:23PM (#11213123)
Correct - Least Privilege says you do the absolute least you need to do in order to make things work, so that any errors are limited to that one part of the system.

What's been done here by Wireshark isn't least privilege, or secure. Its like the opposite of least privilege and security.

[ Parent | on HN ]