News for hackers. Stuff that matters.

A comment on Linksys Velop routers send Wi-Fi passwords in plaintext to US servers. Parent comment

Re:Linksys Velop routers send Wi-Fi passwords in plaintext t... by JoshuaRogers on Tuesday July 09, 2024 @01:00PM (#40918302)
You might consider 1Password. They don’t have the key so they effectively only see an all of the data in encrypted form, not even revealing the site, if I recall.

They have some fascinating papers about it, if I recall.

[ Parent | on HN ]
Re:Linksys Velop routers send Wi-Fi passwords in plaintext t... by SahAssar on Tuesday July 09, 2024 @01:27PM (#40918650)
That's standard for all password managers IIRC. If they can get your into your vault without your master secret then it is a bad password manager.

What has happened to some password managers though is that they don't store the metadata encrypted (like username, website name, etc.) so that leaks have revealed which sites you use but I don't think any decent password manager has leaked passwords without a client being hacked, right?

[ Parent | on HN ]
Re:Linksys Velop routers send Wi-Fi passwords in plaintext t... by playingalong on Tuesday July 09, 2024 @05:13PM (#40921207)
Yet they are the same org who develop and release the client software, which obviously has access to plain text values.
[ Parent | on HN ]