Bitwarden: Free, open-source password manager

Re:Bitwarden: Free, open-source password manager by Thorrez on Sunday October 06, 2019 @11:36PM (#21177148)

Hmm, what if a malicious program modifies your PATH (or creates a bash alias) so that whatever command you use before you enter your master password is now replaced with a backdoored one?

[ Parent | on HN ]

Re:Bitwarden: Free, open-source password manager by aorth on Monday October 07, 2019 @01:19AM (#21177753)

You should specify the full path to the real "pass" when you configure the browser extension. This is a very common problem—with a known solution—in shell scripts since forever.

[ Parent | on HN ]

Re:Bitwarden: Free, open-source password manager by Thorrez on Monday October 07, 2019 @03:07AM (#21178209)

Is the browser extension configuration owned by root? I thought that would be owned by your user. So the malware could modify that configuration.

[ Parent | on HN ]