News for hackers. Stuff that matters.

A comment on Bitwarden: Free, open-source password manager. Parent comment

Re:Bitwarden: Free, open-source password manager by proaralyst on Monday September 25, 2023 @05:36AM (#37641349)
Note that pass by design leaks both the websites you have set up and the metadata of the history of each record. This might suit your threat model, or it might not.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by fryktelig on Monday September 25, 2023 @06:10AM (#37641520)
Wouldn't the attacker need to breach your git server first before that was leaked?
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by zikduruqe on Monday September 25, 2023 @06:58AM (#37641853)
If I'm looking in your ~/.password-store directory and see entries named Finanace/, Travel/, Streaming/, Work/... you have bigger problems.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by xcdzvyn on Monday September 25, 2023 @07:01PM (#37651940)
Could I ask why?
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by zikduruqe on Monday September 25, 2023 @10:30PM (#37653601)
That means I have access to your local machine if I can view your ~/.password-store directory. I might not be able to view or decrypt the contents of every entry, but I still have access to your machine.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by xcdzvyn on Monday September 25, 2023 @10:47PM (#37653707)
Ah, right, I didn't consider that. Thanks.
[ Parent | on HN ]