3 ms·
- LessPass is a webpage that can be changed at any time and collect website, username and password triplets. This is quite a big issue because it can be used f
by zimbatm 7y ago
- LessPass is a webpage that can be changed at any time and collect website, username and password triplets.
This is quite a big issue because it can be used for targeted attacks. There is no way of detecting compromises without reading the source on every page load.
- op00to 7y agoThere is no way you can tell if there’s an undetectable worm in your system.
- baobabKoodaa 7y agoThose things are in no way comparable. First of all, this is not a transfer of trust from A to B: in both cases (traditional password manager or this thing) you still need to trust that your own device is not compromised. But with this thing, you _also_ need to trust that the website is not compromised. Secondly, the website is a much juicier attack target than your personal computer.
- sarakayakomzin 7y agoI dont understand why you would let a malicious actor access this in the first place.
- bad_user 7y agoIn all fairness, it's trivial to host it yourself.