News for hackers. Stuff that matters.

A comment on 1Password Has Raised $620M. Parent comment

Re:1Password Has Raised $620M by avianlyric on Wednesday January 19, 2022 @11:54AM (#29996237)
> you're always a silent update away from it all being dumped on the internet.

This is true of all password managers that have any ability to connect to the internet. You’re one silent update away from your manager suddenly uploading all your passwords to a random endpoint in Russia.

[ Parent | on HN ]
Re:1Password Has Raised $620M by ifyoubuildit on Wednesday January 19, 2022 @12:57PM (#29997316)
Theoretically, if you audit the source then you only really need to care about updates to the actual code. If it doesn't do silent updates then it can't change underneath you, even if it does some kind of network operations.

Its not fool proof, but it feels better than a black box that could be a different black box tomorrow or after the next acquisition or round of investment.

[ Parent | on HN ]