3 ms·
No, 99% are the ones copied from a password manager application.
by jakobdabo 11y ago
No, 99% are the ones copied from a password manager application.
- z3t4 11y agoIf there is a Trojan, it can read the clipboard data. But most ppl save their password unencrypted. And can then be found by exploits in browser, java, flash, etc. Or unknowingly sharing the password file on a file-sharing network :P It's more secure to write it down on a piece of paper, then saving it on your hdd and copy/paste into the password box.
- emsy 11y agoWhy should a trojan bother to read files or clipboard data when it can read the password directly from the input field? You don't even need a trojan for this purpose, simple XSS at the right spot is sufficient. This means it's irellevant wether you write it on paper or in a file, since the password will be stolen when it's entered. The only thing you can do is to make sure your password is long enough so it can't be guessed, and that's where a password manager will help you.