2 ms·

Can't any program on your computer also just keylog your master password and get your whole database? That's worse than getting individual passwords from the cl

• singlow 7y ago
  Only a program with elevated priveleges can record keystrokes when not focused. Unpriveleged programs can see the clipboard data much more freely.
  • Thorrez 7y ago
    Hmm, what if a malicious program modifies your PATH (or creates a bash alias) so that whatever command you use before you enter your master password is now replaced with a backdoored one?
    • aorth 7y ago
      You should specify the full path to the real "pass" when you configure the browser extension. This is a very common problem—with a known solution—in shell scripts since forever.
      • Thorrez 7y ago
        Is the browser extension configuration owned by root? I thought that would be owned by your user. So the malware could modify that configuration.