News for hackers. Stuff that matters.

A comment on Browser Extension Password Managers Exposing Passwords Everywhere. Parent comment

Re:Browser Extension Password Managers Exposing Passwords Ev... by jagermo on Saturday December 21, 2013 @05:21AM (#6946336)
Not sure it would be that easy. LastPass only auto fills known domains, so you would have to spoof that too.
[ Parent | on HN ]
Re:Browser Extension Password Managers Exposing Passwords Ev... by wubbfindel on Saturday December 21, 2013 @06:54AM (#6946471)
Hence why they said:

"send it to your yahoo mail and LastPass would fill it up and submit because it's served under yahoo domain."

[ Parent | on HN ]
Re:Browser Extension Password Managers Exposing Passwords Ev... by korg250 on Saturday December 21, 2013 @09:27AM (#6946719)
Then you disable autofill. Problem solved.
[ Parent | on HN ]
Re:Browser Extension Password Managers Exposing Passwords Ev... by wubbfindel on Monday December 23, 2013 @09:28AM (#6954357)
True....but now if I suggest LastPass to anyone I have to remember to opt-out of this feature.

I am actually a LP user, but I would prefer it was more secure by default.

[ Parent | on HN ]