News for hackers. Stuff that matters.

A comment on Bitwarden PINs can be brute-forced. Parent comment

Re:Bitwarden PINs can be brute-forced by IceWreck on Sunday March 19, 2023 @11:36AM (#35220040)
It already exists: keepass and sync your DB on all your devices with syncthing (which is p2p).

Or host vaultwarden on your homeserver and access it only through wireguard/nebula self hosted VPN.

[ Parent | on HN ]
Re:Bitwarden PINs can be brute-forced by Macha on Sunday March 19, 2023 @12:58PM (#35221007)
Note the KeePass's resistance to the attack mentioned depends on the security of .NET's secure string, which, here's what Microsoft has to say about it (https://github.com/dotnet/platform-compat/blob/master/docs/D...)

As for KeePassXC, last I checked it didn't even bother.

[ Parent | on HN ]