Hacker News new | ask | show | jobs
by cnt0 2098 days ago
I think this is the first time I have seen a password manager taking such steps to improve data isolation.

IMO, while the blog post frames the "remote access" feature as a way to improve compatibility with more OSes, the most interesting side effect is that it significantly improves security!

One of the most common criticisms towards password managers is that "All of your eggs are in one basket. If your system is compromised, it is game over". With this thing, you can now have just one, arguably pretty hardened, basket. Instead of having multiple fragile baskets. E.g., if your desktop PC is compromised, an attacker cannot simply read out all secrets from RAM. Reading secret data must now be authorized on a different device, on a case by case basis.

Kudos, Paulo. This is a really cool and original idea.

(Full disclosure: I am a friend of Paulo's, so I'm obviously biased; nonetheless, I truly feel he has built a great product).