3 ms·
Here are two obvious reasons for wanting to hide this meta information: 1) ejcx signs up for a porn service and is embarrassed to admit it 2) ejcx has an acco
by willvarfar 11y ago
Here are two obvious reasons for wanting to hide this meta information:
1) ejcx signs up for a porn service and is embarrassed to admit it
2) ejcx has an account on some server compromised. The attacker now wants to get a nice list of other sites that the ejcx also uses, so they can try their luck to see where ejcx has foolishly used the same or similar password and login name. This information is just a github search away.
In both cases, ejcx may never be so foolish?!. But users of password management apps in general mess up all the time.
I want a password manager that I have confidence in to upload my passwords somewhere I can retrieve them if I lose my home computers etc. However, I don't want to announce to the world the websites I visit.
- ejcx 11y agoI don't buy your second point. Your argument is that an attacker can try the password elsewhere faster, when the list of sites an attacker is interested in is small. An attacker could try every site in the Alexa 1m before anyone knows the sites passwords were dumped anyways.