5 ms·
It makes me slightly weary, as those sorts of things can have unintended consequences. For example, there was a soc al engineering exploit where someone would
by jedimastert 6y ago
It makes me slightly weary, as those sorts of things can have unintended consequences. For example, there was a soc
al engineering exploit where someone would call into Amazon and add a credit card to an account they didn't own. They would then call right back and request a new email added to the account and use the freshly added credit card as authentication.
They could then use your Amazon account, or use the real card associated with the account as authentication for something else
- taeric 6y agoNot clear how that has any relevance here. If the encryption is broken, pretty sure most encryption is busted.
- GoblinSlayer 6y agoEncryption is broken, just not in all scenarios, that's why security without threat model is meaningless.
- taeric 6y agoMy point was that if this model is broken, I'm not sure I would trust any other for storing data at rest, either. Specifically, why would you still trust any other password manager?
- GoblinSlayer 6y agoPassword managers that use authenticated encryption are not vulnerable to such attacks. Well, it's more a hypothetical attack, in practice you're more likely to get a keylogger.
- taeric 6y agoI'm not sure what you mean by authenticated encryption. I'm assuming you just meant single key encryption. My question is if those are really on a different set of math, as my understanding was that they were not, all told. If you can bust public/private key encryption, you can typically bust all encryption. Is that not necessarily the case?
- GoblinSlayer 6y agoPass uses public key to encrypt files, an attacker needs to know only the public key to forge pass files, and that public key isn't secret, it's stored in plain, unencrypted, that's why you can create pass files without entering master password that protects private key which is not used to create pass files. That's the catch with asymmetric encryption.
- taeric 6y agoBut what is the threat vector? I have to pull the attacker's changes into repo. And... I would still have the old passwords. How does this help an attacker get my passwords?
- GoblinSlayer 6y agoIt's not a certainty of abuse, only uneasiness about technical feasibility. Historically abuse of forgery was clever and unpredictable, as a result design of cryptographic systems tries to prevent forgery when possible. A hypothesis: pass prints text from decrypted file to terminal, terminals have rich functionality, legacy features and wide attack surface, so text printed to terminal is an attack vector.