News for hackers. Stuff that matters.

A comment on Switching from 1Password to Bitwarden. Parent comment

Re:Switching from 1Password to Bitwarden by stinky613 on Sunday November 19, 2017 @10:10AM (#15734178)
I use password manager browser extensions... but honestly they make me a little uncomfortable, and I'm slowly migrating away from them.

If your computer were a city, the web browser would be the high crime area. I may have my valuables in a locked safe, but it's a little bit self-defeating to carry that safe with me in the places where I'm most likely to be mugged.

[ Parent | on HN ]
Re:Switching from 1Password to Bitwarden by Santosh83 on Sunday November 19, 2017 @10:18AM (#15734220)
If you have a malicious extension, then under XUL I think it is game over. WebEx probably offers more isolation and/or protection. Also note that a malicious addon can possibly also record passwords that are pasted in manually from a password manager, or auto-typed.

On the other hand a website should not be able to get at any password stored in (or pasted into) the browser except its own.

[ Parent | on HN ]