News for hackers. Stuff that matters.

A comment on pass – the standard Unix password manager. Parent comment

Re:pass – the standard Unix password manager by gnull on Friday June 17, 2022 @09:01PM (#31786389)
Access to the vault ≠ access to unlocked vault. This is the whole point of storing anything encrypted on your disk.

The password managers don't protect against a malware running on your laptop with root privileges and attaching to your processes. They protect against someone taking the disk out of your computer and trying to extract the passwords.

[ Parent | on HN ]
Re:pass – the standard Unix password manager by blueflow on Saturday June 18, 2022 @05:23AM (#31788416)
But if they have the disk and modify is, its still them who have the disk. So the "No binding between keys/values" and "No authentication of values" still dont work out, either. And they are able to modify the contents on my disk, they'd be easier off installing a rootkit, pass cant protect against that.
[ Parent | on HN ]