4 ms·

A security researcher made a strong case against this advice. Injection of privileged components into the browser sandbox as well as opening you up to a lot of

A security researcher made a strong case against this advice. Injection of privileged components into the browser sandbox as well as opening you up to a lot of IPC vulnerabilities. https://lock.cmpxchg8b.com/passmgrs.html https://lock.cmpxchg8b.com/passmgrs.html

rascul 4y ago
Is that relevant to Bitwarden? At least the first vulnerability in the article does not appear to apply to Bitwarden for me here, I'm not currently able to test the other two.
- Barrin92 4y ago
  if you use the browser extension and turn autofill on it applies to Bitwarden as well. If you use the desktop version or an alternative like Keepass, which Tavis suggests, it's not an issue.
  - rascul 4y ago
    Ahh that's it, I'm not using autofill.