3 ms·
> this article only gives me a sense of safety for our own corporate laptops. Keep in mind that it was a sanitized laptop with no actual data on it, built for
by outworlder 5y ago
> this article only gives me a sense of safety for our own corporate laptops.
Keep in mind that it was a sanitized laptop with no actual data on it, built for the test.
A random employee's laptop? Probably has all sorts of goodies. Don't get complacent.
- exhilaration 5y agoA random employee's laptop? Probably has all sorts of goodies. Don't get complacent. Like a PASSWORDS.txt file on the desktop which said employee uses as a password manager.
- killjoywashere 5y agomore like Passwords.doc, synced to at least two cloud back-up services.
- shapefrog 5y agoNo cloud backups allowed on a corportate laptop, got to email it to yourself instead. Or my personal super advanced, high security method - keep it in the 'drafts' folder.
- vxNsr 5y agoIt should be noted that if you were able to compromise the OS login credentials you also have access to most browser password managers, and as a feature many 3rd party managers also let you unlock with the user password… so in this case those are compromised too.
- MonaroVXR 5y agoBitwarden needs to be unlocked after your browser is being closed. It's the stock setting.
- arpa 5y agoFirefox uses a master password for its password store and stores them in own encrypted sqlite database. Chrome stores them using system keyring, which is ok in linux, not so fine in windows.
- Swannie 5y agoBut Firefox doesn't require the password on reboot - or to even access the plaintext password in the password manager! So just fire it up, and access the passwords. The on disk encryption is pretty redundant.
- arpa 5y agoWe must have been using different firefoxes, as I have to enter my master password quite often (even after locked screen).