4 ms·
> If someone types "pass" in your terminal it will show a list of sites that you've stored. This is not really any different from Keychain on a Mac. I don't re
by mumblemumble 6y ago
> If someone types "pass" in your terminal it will show a list of sites that you've stored.
This is not really any different from Keychain on a Mac. I don't really see it as a major downside.
If someone's logged into the computer as you, you're already hosed, and this is hardly the first place they're going to look to get a list of websites you've visited.
- cycomanic 6y agoBut that's not the concern, anyone who gets their hand on your passwordstore (encrypted) gets the same information. That is not the case with a format that stores your password in one big database. The implications can be quite significant, because if I get my hands on your store, I might find out that you are User xx on yy which I can then use to try to compromise via social engineering (or it might has a known exploit) and use that as a springboard for other sites that I know from your pass store.