Vulnerabilities in Password-Manager Apps

Re:Vulnerabilities in Password-Manager Apps by kqr2 on Tuesday February 28, 2017 @11:31AM (#13754940)

Some older papers on security vulnerabilities of password managers:

https://www.schneier.com/blog/archives/2014/09/security_of_p...

Any thoughts on Bruce Schneier's PasswordSafe password manager?

[ Parent | on HN ]

Re:Vulnerabilities in Password-Manager Apps by seanieb on Tuesday February 28, 2017 @02:54PM (#13757239)

And heres another good one: https://people.eecs.berkeley.edu/~dawnsong/papers/sec14-pape...

"The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers"

[ Parent | on HN ]

Re:Vulnerabilities in Password-Manager Apps by photon-torpedo on Tuesday February 28, 2017 @06:59PM (#13759535)

The good thing about PasswordSafe is that the file format is well documented, so there are several implementations of password managers using this format, which should all be interoperable. For Android, there is the app PasswdSafe. It also offers its own keyboard for entering passwords. Sad to see they didn't test this one...

[ Parent | on HN ]

Re:Vulnerabilities in Password-Manager Apps by stcredzero on Tuesday February 28, 2017 @01:04PM (#13755957)

Another password vault analysis paper found that one to be the safest they found.

[ Parent | on HN ]

Re:Vulnerabilities in Password-Manager Apps by cjak on Tuesday February 28, 2017 @07:52PM (#13759906)

Would you have a reference for that?

[ Parent | on HN ]

Re:Vulnerabilities in Password-Manager Apps by stcredzero on Wednesday March 01, 2017 @02:42PM (#13767486)

https://www.cs.ox.ac.uk/files/6487/pwvault.pdf

[ Parent | on HN ]