4 ms·
These are security critical pieces of software. Like, AV, if the password manager makes it easier to compromise your access in bulk, that's a very very bad thin
by mentat 10y ago
These are security critical pieces of software. Like, AV, if the password manager makes it easier to compromise your access in bulk, that's a very very bad thing. This doesn't need to be targeted, just throw some JS into an ad and pwn up 100s of 1000s of accounts. That's actually worse.
- saosebastiao 10y agoMy black hat method is much easier than that, and it doesn't even require a black hat skillset. 1) Download two datasets from different massive breaches. You can find plenty of them with plaintext passwords on any torrent tracker. 2) Correlate email and password combos across datasets. Don't worry, you'll find 10s of millions of people who don't use password managers and reuse passwords. 3) profit If you have reason to believe you're being targeted, any breach is a problem. But until my method no longer produces results, theres no reason to believe black hats will go through any additional effort to obtain the average person's creds.