Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Suffice to say, unless your last name is Snowden, it should not be a concern to you.

I wouldn't be so sure about that. People store banking/payment credentials in them, so there is a large incentive to mount a scalable attack against an even moderately popular password manager. Crypto wallets are a popular target too for the same reason (although the risk is even more immediate there).



How are you going to "mount a scalable attack" against a local-only password manager?


Malware targeting unlocked local password managers would be one option.


In that case aren't you already hosed because the same malware can steal all your login sessions?


no because I'm not logged into all of my accounts at once but if they can open the PW database they can




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: