News for hackers. Stuff that matters.

A comment on Bitwarden Acquires Passwordless.dev. Parent comment

Re:Bitwarden Acquires Passwordless.dev by hn_throwaway_99 on Wednesday January 18, 2023 @02:42PM (#34431913)
That's not a fair comparison. The differences in LP and 1P encryption approaches have been well known for years, and they are fundamentally different.

Now, while 1P encrypted vaults are not brute-forceable the way LP's are, that doesn't mean it's impossible to hack 1P (e.g. malicious code injection in any of their apps or plugins), but I don't like the "everything turns out to be a false promise" broad-brushing when there are real and verifiable differences in how these companies secure your data.

[ Parent | on HN ]
Re:Bitwarden Acquires Passwordless.dev by fluidcruft on Wednesday January 18, 2023 @06:39PM (#34434733)
Unless you want to spend the time doing RE of crypto (so fun!), how to do you even know who works for 1Password?

Are you waiting for Snowden 2.0 to explain how things work a decade later?

[ Parent | on HN ]