News for hackers. Stuff that matters.

A comment on Maximizing password manager attack surface.

Re:Maximizing password manager attack surface by bitdeep on Friday November 30, 2018 @07:17PM (#18574033)
Man... now a days, it's impossible for a modern web app to not use JSON parsing. Can't see this as problem for a password manager. If you can't trust in the browser, you are dead. Ok, Kasp want to sell they fish, but, we need good arguments.
[ Parent | on HN ]
Re:Maximizing password manager attack surface by wtracy on Friday November 30, 2018 @09:49PM (#18574761)
Most web apps do this in a JavaScript context inside the browser's security sandbox, not as native C++ code with unknown privileges.
[ Parent | on HN ]