Re:Browser password managers – flawed security, by design
by MattPalmer1086 on Monday August 15, 2022 @03:36AM
(#32466865)
That's a fair assessment of the article I think. It's a genuine threat, and one we have had to deal with in a small way before.
Most of the criticism I've read here seems to be dismissing the threat entirely, using the weak "if that happened you've got bigger problems" argument.
If passwords stored in plaintext is a problem, don’t just use slightly harder to access storage. Use SSO so there are not credentials to steal.
If the article gave a complete picture of what to do to mitigate the damage of endpoint compromise or was less alarmist in its assessment of risk, I would have liked it better.