3 ms·
I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative. Unless I'm mistaken, 1Password no long
by foobiekr 6y ago
I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative.
Unless I'm mistaken, 1Password no longer ephemerally decrypts passwords as needed and only while used and then scrubs the memory. [1, old but still] The excuse, if I remember it, was that garbage collected languages made this challenging. Even so, there is some irony in them moving away from the temporary, one-at-a-time, scrubbed approach just before all of the side channel attacks that allowed leaking memory across processes became widespread.
[1] https://nakedsecurity.sophos.com/2019/02/21/password-managers-leaking-data-in-memory-but-you-should-still-use-one/ https://nakedsecurity.sophos.com/2019/02/21/password-manager...
- Hawxy 6y ago> The excuse, if I remember it, was that garbage collected languages made this challenging This is one of the main reasons why the core of 1password was rewritten in Rust: https://support.1password.com/kb/201902a/ https://support.1password.com/kb/201902a/
- deleted 6y ago[deleted]