4 ms·
> This problem is pervasive among online password managers, you can never be sure if you’re interacting with a website or your password manager. Isn't this tru
by chrisan 5y ago
> This problem is pervasive among online password managers, you can never be sure if you’re interacting with a website or your password manager.
Isn't this true for any scenario, password manager or not? If a site has been compromised without you knowing and you enter your password from memory, paste, or a password manager, that password is at risk.
Is the author saying that he is able to access ALL passwords in the password manager via a single malicious site?
- richardwhiuk 5y agoThat's the vulnerability he's targeting, yes.
- kiwijamo 5y agoI wonder if the author has used bitwarden at all? I always access bitwarden through the browser toolbar which for me guarantees that I am dealing with the Bitwarden extension and not the website itself. It seems from the article other password managers inject themselves into the webpage which I can agree is a concern. However this is not how all password managers operate--Bitwarden being one example disapproving that assumption.