News for hackers. Stuff that matters.
Re:Android "Password Store" client for pass discontinued by jasonm23 on Monday October 21, 2024 @07:04AM (#41902848)
I'm really confused. How do you think that would work with an opensource password manager like pass / password-store.org

- The data is stored in Git at a location of your choosing and security level

- The data encryption is provided by GnuPG using your personal key

This is why I use it, there's no potential for anyone to add a back door, except me.

BitWarden, LastPass, etc etc... you have a point, and I would not trust these companies one iota.

Apple, Google etc...uhm... not in a million years.

Re:Android "Password Store" client for pass discontinued by WD-42 on Monday October 21, 2024 @01:40PM (#41906423)
pass clients can totally be backdoored. They decrypt the secret to plain text and add it to your clipboard or whatever... could easily shuttle it off somewhere else at that point.
Re:Android "Password Store" client for pass discontinued by jasonm23 on Tuesday October 22, 2024 @03:14AM (#41911948)
You build it from source if you have concerns, so no, it can't "totally be backdoored".