News for hackers. Stuff that matters.

A comment on On Password Managers. Parent comment

Re:On Password Managers by chiefalchemist on Thursday July 20, 2017 @04:23PM (#14815970)
Well. Not to defend LP, but for those who don't click through, offline mode can (and should be?) disabled.

Perhaps this is a case where a feature that makes some sense in some cases was added, the problem is, outside that scope it's a really bad idea. But then someone said "We'll make it optional..." and the rest was history?

[ Parent | on HN ]
Re:On Password Managers by tallanvor on Friday July 21, 2017 @08:35AM (#14819872)
I wouldn't agree that it necessarily should be disabled. Sometimes I'm on my computer with no internet access... If offline access is disabled, I have no access to passwords for locally installed applications.
[ Parent | on HN ]
Re:On Password Managers by chiefalchemist on Friday July 21, 2017 @06:33PM (#14824223)
Makes sense.

What would I do? I'd probably set up a second Chrome user and the LP for that user/browser would be auth creds for only stuff I'd need offline.

That would allow the main LP vault to have it disabled. This mitigates exposure.

[ Parent | on HN ]