Bitwarden PINs can be brute-forced

Re:Bitwarden PINs can be brute-forced by lxgr on Monday March 20, 2023 @09:59AM (#35231588)

Don't worry about me, I do have a screen lock.

Still, I think that software in general, and security software in particular, should follow the principle of least surprise.

In the case of PINs, this is, in my view, an implicit contract to rate-limit invalid PIN attempts somewhere, regardless of all other security measures.

[ Parent | on HN ]

Re:Bitwarden PINs can be brute-forced by SiempreViernes on Tuesday March 21, 2023 @04:30AM (#35243751)

Sorry if it came across as a statement directed at you as a person lxgr, I was using "you" in the generalised sense:

> We can use one, you or we when we are making generalisations and not referring to any one person in particular. When used like this, one, you and we can include the speaker or writer

https://dictionary.cambridge.org/grammar/british-grammar/pro...

[ Parent | on HN ]