3 ms·
While the encryption might be solid, if you have a security issue in a sensitive area such as the build environment, you cannot have any confidence in the app.
by m1keil 3y ago
While the encryption might be solid, if you have a security issue in a sensitive area such as the build environment, you cannot have any confidence in the app.
I'm not saying that this is what happened here, just pointing out that there are other risks here which cannot be mitigated by strong encryption.
- a10c 3y agoThat extends to any and all applications. Nothing is stopping a local only Keepass installation from being exposed via a supply chain attack to start sending passwords to an attackers server. In fact, I trust 1Password's corporate infrastructure more than my own ability to lock down my personal devices.
- m1keil 3y agoI don't disagree. Just pointing out that "zero knowledge" isn't the cure for every security issue.