3 ms·
Not if the shared key is present in the host computer already, which it'd have to be if the host process is to decrypt anything.
by drhayes9 11y ago
Not if the shared key is present in the host computer already, which it'd have to be if the host process is to decrypt anything.
- nbadg 11y agoParticularly if someone is specifically targeting 1password, which they (almost by definition) already would be. It'd just be a single patch to the exploit and you're back in business. Well, okay, obviously that's an oversimplification, but it wouldn't do you much good regardless.
- ikeboy 11y agoBut then malware must run as root.
- julie78787 11y agoNot necessarily. Malware only requires privilege if it is violating a security policy. There are a variety of attacks in which a process executing as a user is able to access resources controlled by other processes which are executing as the same user.
- ikeboy 11y agohttp://arxiv.org/abs/1505.06836 http://arxiv.org/abs/1505.06836 Other non root apps can masquerade as the app intended to get the data, and if it's sent in plaintext, they get information they wouldn't if it used a shared key accessible to the intended app.