News for hackers. Stuff that matters.

A comment on Backdoored password manager stole data from as many as 29K enterprises. Parent comment

Re:Backdoored password manager stole data from as many as 29... by rocqua on Sunday April 25, 2021 @04:24AM (#26931191)
Syncing software could perhaps do so cyphertext malleability attacks. Changing the ciphertext, and deducing information on the plaintext based on client behavior.

Perhaps they could force you into a password reset for a specific site by corrupting the correct files. That might be an interesting first step for an account takeover.

These are highly complicated, active attacks. I wouldn't worry as long as your sync service isn't literally the Russian or Chinese government.

[ Parent | on HN ]
Re:Backdoored password manager stole data from as many as 29... by jfrunyon on Sunday April 25, 2021 @04:34AM (#26931226)
> Perhaps they could force you into a password reset for a specific site by corrupting the correct files. That might be an interesting first step for an account takeover.

It would be interesting to see that accomplished without making it obvious (particularly: without corrupting large parts of or the entire database). KeePass encrypts the whole database.

[ Parent | on HN ]