3 ms·
> Once attacker gets your one master password (through zero-day or just by watching you type it A bit off-topic perhaps, but can a keylogger really grab your m
by seppin 9y ago
> Once attacker gets your one master password (through zero-day or just by watching you type it
A bit off-topic perhaps, but can a keylogger really grab your master password as you type it? 1password and OSX has secure entry for entering a system password, no?
- ss248 9y agoI don't know much about OSX, but do you really think it will stop him once he is already in the system and has kernel access? If i understand correctly, "secure input" just tells operational system to stop sending keyboard events to other programs. If that's the case, then it doesn't help against zero-day at all.
- scott_karana 9y agoKey loggers don't need to be software. A USB interception, a weak proprietary 2.4GHz radio interface, or a badly implemented Bluetooth keyboard can all leak password plaintext directly to an attacker.
- seppin 9y agoso very specific, targeted attacks. In other words, unless pros are going after you do enjoy (relative) security
- deleted 9y ago[deleted]