News for hackers. Stuff that matters.
Re:NIST advises services to not require that passwords be ch... by dsacco on Saturday May 20, 2017 @06:29PM (#14384694)
If malware has compromised your device, there is nothing you can meaningfully do to improve the security that is already offered by a password manager. This scenario is right up there with physical access to the machine - you're already screwed.

To comment on this specific example - if you add the same set of characters to every item in a password manager, an attacker can deduce that it's a common obfuscation method.

There are no comments on this comment yet.