having password managers integrated with browsers and cloud synced is the biggest trick the security industry pulled on its customers

aljaz

Artilektt

Agreed. It's a clickbait title that I should've tamed.

I don't like that title. Makes it sound like password managers are maliciously designed to steal your creds.

Better title: How password managers are vulnerable to this newly discovered attack

3a42879d5f

Password managers are a single point of failure, one successful attack and your duck is cooked.

asterisk32

security

tldr if you're on a malicious website, it can make you unknowingly and unintentionally autofill personal info. Most password managers allow you to disable autofill entirely which is recommended until passwords managers mitigate the attack vector.

edit: this was posted earlier https://stacker.news/items/1088323/r/k00b