News for hackers. Stuff that matters.

A comment on Ask HN: Which password manager do you use / would you recommend?. Parent comment

Re:Ask HN: Which password manager do you use / would you rec... by unodonut on Monday February 16, 2026 @08:39PM (#47042640)
According to the wiki, a one-click exfiltration vulnerability has existed for more than half a year and hasn't been fixed:

> In their default configurations, these extensions were shown to be exposed to a DOM-based extension clickjacking technique, allowing attackers to exfiltrate user data with just a single click. LastPass version 4.146.8 (September 12, 2025), which was intended to address the issue, remains vulnerable

https://en.wikipedia.org/wiki/LastPass#Security_incidents

[ Parent | on HN ]
Re:Ask HN: Which password manager do you use / would you rec... by unodonut on Monday February 16, 2026 @11:01PM (#47043558)
Update, with Apple's 'Passwords' app, it appears all someone needs to do to get access to every single stored password, is grab your iPhone while it's unlocked, or sneak it from you while sleeping and use face id to unlock it.

Or, they could shoulder surf to get a 6 digit pin to unlock the phone, then steal it, then they're in.

Seems way less secure than 'Correct Horse Battery Staple'.

[ Parent | on HN ]
Re:Ask HN: Which password manager do you use / would you rec... by NoNoisle on Tuesday February 17, 2026 @01:02PM (#47050688)
Faced is required to unlock the passwords app if you enable stolen device protection
[ Parent | on HN ]