The site being evil is equivalent to the password being compromised. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

whyever on Nov 7, 2016 | parent | context | favorite | on: LessPass: sync-less open source password manager

The site being evil is equivalent to the password being compromised.

fooyc on Nov 9, 2016 [–]

And the password is the hash of the master password, which gives the evil all other passwords.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact