News for hackers. Stuff that matters.

A comment on The Browser Monopoly. Parent comment

Re:The Browser Monopoly by jsutton on Wednesday August 21, 2019 @10:36AM (#20757609)
Password managers don't hold your password in plaintext, so the liability there only exists if you don't think the latest encryption methods are enough.
[ Parent | on HN ]
Re:The Browser Monopoly by basch on Wednesday August 21, 2019 @10:47AM (#20757724)
Thats not true. Theres other ways into your account besides breaking encryption. Off the top of my head, a brick to my head and the use of my thumbprint would do it.

Unlike how a normal service is normally supposed to store my password (hashed, but with no copy of the original password anywhere, EVENT THE LOGS) the password manager DOES retain a plain text copy of a password, not JUST a hashed derivative.

[ Parent | on HN ]
Re:The Browser Monopoly by deadbunny on Wednesday August 21, 2019 @11:17AM (#20758014)
> Off the top of my head, a brick to my head and the use of my thumbprint would do it.

Maybe don't use 1FA for your passwords?

[ Parent | on HN ]