pull down to refresh

Interesting, but is this really a weakness of the password managers? It seems like it works by tricking you into clicking an autofill---but you're still on a malicious website, you still have to click the submit button (I think?)
reply
If the password manager browser extensions can protect against the issue, I feel like they should. Whether it’s their fault or not, given their role, they should do everything in their power to prevent such issues. Just my 2 sats
reply
I agree. I was just coming at it from the perspective of "am I in danger?"
reply
I get you now.
reply
indeed, it s their job (security)
reply
Yes, i understand also like that :
΅Critically, only a single click such as accepting a cookie banner or closing a pop-up can be enough to leak sensitive information like login credentials, stored 2FA codes, passkeys, and even credit card numbers or personal addresses.¨
reply
18 sats \ 1 reply \ @freetx 22h
This is one of the reasons why I've never trusted browser extensions that interact with your password manager....it always seemed like the obvious weak point of security.
I much prefer to just manually copy/paste so that your actions are explicit.
reply
i do the same actually, i prefer to type my pwd instead of using an app....
reply