2 ms·
I use Vaultwarden (formerly bitwarden_rs) just for myself. I still use the Bitwarden extension in Firefox, which is a similar attack surface to what you descri
by chrismorgan 4y ago
I use Vaultwarden (formerly bitwarden_rs) just for myself.
I still use the Bitwarden extension in Firefox, which is a similar attack surface to what you describe, though probably a shade less vulnerable in practice. I’d like to replace it with something leaner and functionally superior (it’s pretty heavy, and has the major problem of mostly not working in Private Browsing windows, and some other timing/focus issues that I suspect stem from the same bad design), but I have too much other stuff I want to use.
I don’t serve the Bitwarden web interface on my server at all, but I could.
- aborsy 4y agoWouldn’t Firefox’ or chrome’s built-in password manager (with a master password set) be a better way of bringing a few frequently-used low-impact passwords closer to the internet, than a plug-in written by some developer?
- usrusr 4y agoAn interesting perspective. From that of an attacker, the random plug-in might be a much lower hanging fruit, but also a much smaller one. Obscurity is not completely without merit.