6 ms·
Some people may disagree with me but that's fine. There really isn't a correct answer here. It's a product decision balanced with security. I think _strongly_ w
by ejcx 10y ago
Some people may disagree with me but that's fine. There really isn't a correct answer here. It's a product decision balanced with security. I think _strongly_ wanting this is mostly FUD.
I firmly believe in secure defaults (with all my heart) but I don't think there's a compelling reason to hide site names in this situation.
I trust the strong cryptography (and DJB) that protects the passwords and this is plenty for keeping an attacker out.
Yeah, it's more information for an attacker but I don't think it buys an attacker anything meaningful. Responding to ping or listening on specific TCP ports and responding with service banners is "more information" too, but these are accepted. Running your company on someone else's computer used to not be accepted and now it is.
With strong cryptography there is no reason this information can't be public. If you're truly paranoid, you can always use a private repo or a private git server.
If anyone has a compelling argument for why this information should be secret by default I would love to make the change.
- willvarfar 10y agoHere are two obvious reasons for wanting to hide this meta information: 1) ejcx signs up for a porn service and is embarrassed to admit it 2) ejcx has an account on some server compromised. The attacker now wants to get a nice list of other sites that the ejcx also uses, so they can try their luck to see where ejcx has foolishly used the same or similar password and login name. This information is just a github search away. In both cases, ejcx may never be so foolish?!. But users of password management apps in general mess up all the time. I want a password manager that I have confidence in to upload my passwords somewhere I can retrieve them if I lose my home computers etc. However, I don't want to announce to the world the websites I visit.
- ejcx 10y agoI don't buy your second point. Your argument is that an attacker can try the password elsewhere faster, when the list of sites an attacker is interested in is small. An attacker could try every site in the Alexa 1m before anyone knows the sites passwords were dumped anyways.