Re:Vulnerabilities in Password-Manager Apps
by chmars on Tuesday February 28, 2017 @02:43PM
(#13757128)
That is great, however, it is still worrying since we have no chance to know if bad actors had already exploited the vulnerabilities. I am still very sceptical with regard to password managers as SaaS in the cloud – all eggs are in one basket and this basket is often not well enough protected.
[ Parent
| on HN ]
Re:Vulnerabilities in Password-Manager Apps
by AdmiralAsshat on Tuesday February 28, 2017 @04:35PM
(#13758144)
The write-up indicates that both of the exploits to get to the Master Password would have required physical access to the device, and one required a root exploit.