securityevaluators.com · Saved

Password Managers: Under the Hood of Secrets Management - Independent Security Evaluators

www.securityevaluators.com/casestudies/password-manager-hacking

What Jamie wrote

This is all about how password managers deal with unencrypted data in memory. On disk the encryption is all fine, but when running, they should minimize the attack surface. I was expected better outcomes for 1Password, my preferred password manager. Note though that these all require access to a computer and unlocked memory state, so the real risk is low. Nonetheless, I'd like to see this improved.

Saved the same week · 21 links that week

Everything saved in February 2019