News for hackers. Stuff that matters.

A comment on (In)Security of the “Pass” password manager. Parent comment

Re:(In)Security of the “Pass” password manager by gruez on Sunday January 22, 2023 @12:12PM (#34479577)
> > Same way that dropbox can be compromised: your account gets hacked or the provider gets hacked.

>Nope. My account on my vps is protected with a strong ssh key and password-logins disabled. Also fail2ban is set up to forever disallow ips that try failed logins. So not the same at all.

By "account", I don't mean the account in /etc/passwd on your VPS, I mean the account with your hosting provider. That can be hacked/phished just like a dropbox account, not to mention the provider themselves getting hacked or social engineered.

[ Parent | on HN ]
Re:(In)Security of the “Pass” password manager by msravi on Sunday January 22, 2023 @12:37PM (#34479920)
The vps can be encrypted by a customer supplied key. In google compute, for example: https://cloud.google.com/compute/docs/disks/customer-supplie...
[ Parent | on HN ]