News for hackers. Stuff that matters.
Re:Bitwarden PINs can be brute-forced by NoZebra120vClip on Sunday March 19, 2023 @12:23PM (#35220565)
PINs can be changed. How many fingers ya got?
Re:Bitwarden PINs can be brute-forced by renewiltord on Sunday March 19, 2023 @12:36PM (#35220729)
Ten. I don't get why this is a constraint.

If they're rubberhosing me, I'll just give them the master pass. They won't have to take my finger.

If they get my fingerprint some other way, I can just switch to my next finger. And when I'm done, I can use PINs.

I don't think it's mutability that matters. It's just that I leave fingerprints everywhere.

Re:Bitwarden PINs can be brute-forced by waboremo on Sunday March 19, 2023 @12:44PM (#35220828)
I'm pretty sure you can register the same finger over and over again for new "keys". Assuming you go through the tedious process of disabling, restarting, etc whatever each one of the underlying OS demands. It's an additional layer that Bitwarden (and other apps) do not get direct access to.

So no excuse if you value convenience, PINs are not good. Short easy to remember and enter PINs are also the reason Apple is under fire due to how easily you can avoid biometrics and just use the 6 digit PIN.