Re:Lastpass Security Incident
by lxgr on Thursday December 01, 2022 @09:40AM
(#33816791)
For a "service based" password manager, sure. (It can prevent the service from ever handing over your encrypted database to an attacker.)
In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.
In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.