News for hackers. Stuff that matters.
Re:Browser password managers – flawed security, by design by nl on Monday August 15, 2022 @07:14AM (#32468233)
Many think integrated password managers create more vulnerabilities than they solve. https://lock.cmpxchg8b.com/passmgrs.html is a reasonable overview of this.

> So this article is bringing attention to a weakness in the browser’s built-in password managers, and suggesting a very viable and easy-to-adopt solution.

Because many actual experts disagree it is a weakness

> Why the strong criticism of this article?

The advice tries to make it out like browser suppliers are doing this to lower security for some unknown reason, whereas actually their model is safer than what is recommended.

It is possible to argue against browser suppliers here, but you need to look at their arguments for doing it that way. This article doesn't do that.

There are no comments on this comment yet.