Conversation

Notices

1. DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 10-Mar-2023 07:00:47 JST DarkMahesvara
   "When its users visit a website, the extension detects if there's a stored login for that domain and offers to fill in the credentials. If the auto-fill option is enabled, it fills them automatically upon the page load without the user having to do anything.
   
   While analyzing Bitwarden, Flashpoint's researchers discovered that the extension also auto-fills forms defined in embedded iframes, even those from external domains."
   
   https://www.bleepingcomputer.com/news/security/bitwarden-flaw-can-let-hackers-steal-passwords-using-iframes/
   
   this is exactly why password manager should neither be build in browser nor connected with extensions
   • COOL_FREE_RINGTONES (s8n@posting.lolicon.rocks)'s status on Friday, 10-Mar-2023 07:00:44 JST COOL_FREE_RINGTONES

     in reply to

     • Lumeinshin 3rd impact :asukaPout:
     • Narbray
     @Lumeinshin @DarkMahesvara @Narbray
      likes this.
   • COOL_FREE_RINGTONES (s8n@posting.lolicon.rocks)'s status on Friday, 10-Mar-2023 07:00:45 JST COOL_FREE_RINGTONES

     in reply to

     • Narbray
     @DarkMahesvara @Narbray no
   • Lumeinshin 3rd impact :asukaPout: (lumeinshin@pleroma.skyshanty.xyz)'s status on Friday, 10-Mar-2023 07:00:45 JST Lumeinshin 3rd impact :asukaPout:

     in reply to

     • COOL_FREE_RINGTONES
     • Narbray
     @s8n @DarkMahesvara @Narbray
     Literally me, a .txt chad
      repeated this.
   • COOL_FREE_RINGTONES (s8n@posting.lolicon.rocks)'s status on Friday, 10-Mar-2023 07:00:46 JST COOL_FREE_RINGTONES

     in reply to

     • Narbray
     @DarkMahesvara @Narbray stop installing these things they are not maintained by trustworthy sources
   • DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 10-Mar-2023 07:00:46 JST DarkMahesvara

     in reply to

     • COOL_FREE_RINGTONES
     • Narbray
     @s8n @Narbray define "these things" and "trustworthy sources"
   • Narbray (narbray@varishangout.net)'s status on Friday, 10-Mar-2023 07:00:47 JST Narbray

     in reply to
     @DarkMahesvara It is enough to have the automatic filling disabled, isn't it? :zt_think:
     I have never had it activated
   • DarkMahesvara (darkmahesvara@varishangout.net)'s status on Friday, 10-Mar-2023 07:00:47 JST DarkMahesvara

     in reply to

     • Narbray
     @Narbray yes, the problem is with the browser extension (if you want autofill without extension use KeePassXC)