News for hackers. Stuff that matters.

A comment on Pass: A standard Unix password manager. Parent comment

Re:Pass: A standard Unix password manager by painted on Friday July 21, 2017 @08:01AM (#14819676)
yeah, from a security point of view it's similar to have one file or multiple ones encrypted with the same key
[ Parent | on HN ]
Re:Pass: A standard Unix password manager by zamber on Friday July 21, 2017 @10:40AM (#14820878)
It's not. When you decrypt one file you have all of your passwords in-memory (terminal, clipboard, browser extension, qtpass). When you do that for one login/password pair you only expose that pair, not all of the others.
[ Parent | on HN ]
Re:Pass: A standard Unix password manager by palunon on Friday July 21, 2017 @03:40PM (#14823284)
When you decrypt, you have the key in memory in either case. Assuming you don't put all the password into an untrustworthy output (terminal, clipboard, etc), what's the difference ?
[ Parent | on HN ]