This is precisely the kind of thing companies say after they have fired all their actual bread and butter talent and they are run by clueless execs trying to coast on the brand name of the company until people figure out it is a dead end.
post
9 comments in c/technology@lemmy.zip view that post
Use a real password manager people
replies:
This requires reading application memory
replies:
permalink
fedilink
source
parent
hideshow 2 child comments
Seems like a pretty basic security precaution to avoid loading decrypted secrets into memory before they're needed. Someone who can access application memory can already own you but there isn't really a good reason why they should be able to access secrets that you never accessed while they were in.
I wouldn't say it's an alarming flaw, just seems weirdly and unnecessarily unsafe
replies:
permalink
fedilink
source
parent
hideshow 1 child comment
At some point they will need to be decrypted anyway
I think this was done for performance and simplicity
TIL: If you cat /proc/sys/kernel/yama/ptrace_scope on your linux distro:
- 0: All processes with same UID can read each other's memory
- 1: Restricted (Only parents can read children)
- 2: Admin only (Requires sudo).
Most distros have this set to 1 by default.
More details: man 2 ptrace, search using /: scope
[removed by mod]
permalink
fedilink
source
hideshow 1 child comment
1 comment