News for hackers. Stuff that matters.

A comment on Lesspass – open-source stateless password manager. Parent comment

Re:Lesspass – open-source stateless password manager by op00to on Sunday March 15, 2020 @06:15AM (#22582544)
There is no way you can tell if there’s an undetectable worm in your system.
[ Parent | on HN ]
Re:Lesspass – open-source stateless password manager by baobabKoodaa on Sunday March 15, 2020 @07:00AM (#22582727)
Those things are in no way comparable.

First of all, this is not a transfer of trust from A to B: in both cases (traditional password manager or this thing) you still need to trust that your own device is not compromised. But with this thing, you _also_ need to trust that the website is not compromised.

Secondly, the website is a much juicier attack target than your personal computer.

[ Parent | on HN ]