Re:Not Getting Hacked
by latchkey on Friday December 23, 2022 @11:42AM
(#34107776)
I don't know that the site has been hacked, that's the point. I'd rather not automatically throw my password into a form when I visit a site. It seems like a kind of obvious thing to me.
[ Parent
| on HN ]
The goal of a password manager is to use random password, one generated for each website, so that if one is leaked... Well, nothing more !
So having autofill is a good feature.
Sure and I use that feature... But, you aren't thinking like a hacker.
Leaking one site could allow someone access into another site. For example, if I've integrated API keys from one site into another. It is those sorts of targets that hackers really look for.