Technology

81451 readers

4274 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

L3s@lemmy.world

enu@lemmy.world

technopagan@lemmy.world

L4s@lemmy.world

L3s@hackingne.ws

200

Password managers are less secure than promised (ethz.ch)

submitted 1 day ago by Beep@lemmus.org to c/technology@lemmy.world

108 comments fedilink hide all child comments

Millions of people use password managers. They make accessing online services and bank accounts easy and simplify credit card payments.
Many providers promise absolute security – the data is said to be so encrypted that even the providers themselves cannot access it.
However, researchers from ETH Zurich have shown that it is possible for hackers to view and even change passwords.

you are viewing a single comment's thread
view the rest of the comments

[–] felbane@lemmy.world 2 points 5 hours ago* (last edited 5 hours ago)

"Properly implemented" is doing the heavy lifting in that sentence.

Four paragraphs down from your quote is this:

Their attacks ranged from integrity violations affecting specific, targeted user vaults to the complete compromise of all vaults within an organisation using the service. In most cases, the researchers were able to gain access to the passwords – and even make changes to them.

If E2EE were properly implemented, the above would be impossible.