Re:Browser password managers – flawed security, by design
by pdpi on Monday August 15, 2022 @10:25AM
(#32470076)
The problem is that the article takes on this hyperbole-laden all-or-nothing tone that does nobody any favours.
If you go along with the all-or-nothing mentality, then local file system access is pretty much game over anyway.
If you want to take the security-in-depth approach, you have to first apply it to these password managers and take an honest look at the problems they solve. And it turns out they’re amazing from a cost:benefit benefit perspective.
Put differently: go read the spectre/meltdown papers. Imagine if _those_ were written in the same tone this is. That’s the problem.
If you go along with the all-or-nothing mentality, then local file system access is pretty much game over anyway.
If you want to take the security-in-depth approach, you have to first apply it to these password managers and take an honest look at the problems they solve. And it turns out they’re amazing from a cost:benefit benefit perspective.
Put differently: go read the spectre/meltdown papers. Imagine if _those_ were written in the same tone this is. That’s the problem.