News for hackers. Stuff that matters.

A comment on Ask HN: How Do You Securely Share Passwords in Teams?. Parent comment

Re:Ask HN: How Do You Securely Share Passwords in Teams? by icebraining on Tuesday May 20, 2014 @11:48AM (#7773198)
They should point out that it's vulnerable to JavaScript injection, particularly if you use their servers. One simple change and suddenly they can get your key on your next access.
[ Parent | on HN ]
Re:Ask HN: How Do You Securely Share Passwords in Teams? by karthikv2k on Tuesday May 20, 2014 @11:56AM (#7773246)
Yes, you are right we can modify our JS and get your keys. This vulnerability is in most of the commercial tools out there too. Thats why it is open sourced so you can run it in your own servers. Running it on your own heroku account is close to zero dollars.
[ Parent | on HN ]
Re:Ask HN: How Do You Securely Share Passwords in Teams? by icebraining on Tuesday May 20, 2014 @12:33PM (#7773475)
Not sure if giving Heroku that access is any better :)
[ Parent | on HN ]