You are assuming that the site is not evil. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		fooyc on Nov 7, 2016 \| parent \| context \| favorite \| on: LessPass: sync-less open source password manager You are assuming that the site is not evil.

whyever on Nov 7, 2016 [–]

The site being evil is equivalent to the password being compromised.

fooyc on Nov 9, 2016 | [–]

And the password is the hash of the master password, which gives the evil all other passwords.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact