News for hackers. Stuff that matters.

A comment on 1password is considering a self-hosted option to store vaults. Parent comment

Re:1password is considering a self-hosted option to store va... by shephardjhon on Sunday August 08, 2021 @02:33PM (#28108939)
But in cyber security based software woulden't you need constant updates against new exploits? In something like Fusion 360 or Matlab or office I agree, if you dont need new features you shoulden't pay for updates.
[ Parent | on HN ]
Re:1password is considering a self-hosted option to store va... by freeone3000 on Sunday August 08, 2021 @09:15PM (#28111753)
It's a password protected XML file with a GUI. If there's an attack surface to begin with, something went terribly wrong.
[ Parent | on HN ]
Re:1password is considering a self-hosted option to store va... by upbeat_general on Sunday August 08, 2021 @10:02PM (#28111993)
Is this a joke?

If password managers don't (or shouldn't) have an attack surface, what could (or should)?

I could also describe all the data that google stores as "just a password protected DB with a web GUI"

[ Parent | on HN ]