- Joined
- Jul 25, 2006
- Messages
- 13,943 (2.04/day)
- Location
- Nebraska, USA
| System Name | Brightworks Systems BWS-6 E-IV |
|---|---|
| Processor | Intel Core i5-6600 @ 3.9GHz |
| Motherboard | Gigabyte GA-Z170-HD3 Rev 1.0 |
| Cooling | Quality Fractal Design Define R4 case, 2 x FD 140mm fans, CM Hyper 212 EVO HSF |
| Memory | 32GB (4 x 8GB) DDR4 3000 Corsair Vengeance |
| Video Card(s) | EVGA GEForce GTX 1050Ti 4Gb GDDR5 |
| Storage | Samsung 850 Pro 256GB SSD, Samsung 860 Evo 500GB SSD |
| Display(s) | Samsung S24E650BW LED x 2 |
| Case | Fractal Design Define R4 |
| Power Supply | EVGA Supernova 550W G2 Gold |
| Mouse | Logitech M190 |
| Keyboard | Microsoft Wireless Comfort 5050 |
| Software | W10 Pro 64-bit |
This is really an extremely misleading statement and could, sadly, be misconstrued as suggesting since they are so vulnerable, don't bother using them. That would be horrible, naive and potentially catastrophic advice.
Of course, password managers are, and always will be vulnerable. So is the bank vault at the main branch of JPMorgan Chase Bank, Tiffany & Co. Jewelers, the Palo Verde Nuclear Generating Station, MI5 HQ, the Kremlin, and your house.
Being vulnerable does NOT mean (1) it is being targeted or (2) that it will be compromised if targeted.
You can have security cameras, motion detectors, intrusion alarms, extra deadbolts, and 2 angry rottweilers inside your home. It is still vulnerable. Your wifi can have a passphrase 43 characters long, with a random mix of upper and lower case letters, numerals, and special characters and it is still vulnerable.
If you put it out there, it is vulnerable. How vulnerable is a different manner.
I agree in principle but not in practice - at least for the general public; and that is, 99% of us.
Sure, high-value targets are indeed, targets. But bad guys troll neighborhoods and parking lots looking for ANY unlocked door, ANY car with keys left in the ignition, ANY car with high-value items left on the seat. In other words, they are lazy opportunists looking for easy pickings. They don't have to be targeting you specifically. In fact, they probably aren't.
Same with any data you store out in the cloud.
HOWEVER, ANY password manager that requires a master password/decryption key to unlock the password database is "almost" infinitely better than writing your passwords down - assuming you don't write your master PW on a sticky-note stuck to your monitor.
