Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I would never put financial passwords in a cloud based password manager. Even if they do everything perfectly encryption-wise, no one can guarantee an attacker wouldn't alter the client-side code to leak your master password.

Having said that, it is still useful for less important logins like this website for example, where it isn't a big deal if someone manages to use the account.

However it is a huge privacy issue if people know what accounts you have. For example, I have a hackforums account and pretended to be a normal user there while only using it to scout attack vectors to patch. But to some people, they might assume that I was partaking in actual hacking which is not the case.



> I would never put financial passwords in a cloud based password manager.

At this point any financial institution has 2FA, I think. That still leaves say credit cards, but they are exposed enough that you’re not exactly making it worse even with a terrible custodian like LastPass.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: