News for hackers. Stuff that matters.

A comment on Bitwarden: Free, open-source password manager. Parent comment

Re:Bitwarden: Free, open-source password manager by libeclipse on Monday October 07, 2019 @06:42AM (#21179299)
Dude if your clipboard is untrusted in your threat model then you have bigger problems. Any program that is reading your clipboard could also be logging your keys, watching your webcam, recording your screen, or exfiltrating your files.

Have a reasonable security model please

[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by georgyo on Monday October 07, 2019 @07:00AM (#21179417)
The clipboard is extra vulnerable. It requires no privileges at all to read. Up until very recently, JavaScript in your browser could pull content directly out of your clipboard.

Even beyond that, copy and pasting is training users to copy and paste. This is an even bigger threat imho. There is no layer of extra validation.

[ Parent | on HN ]