this post was submitted on 19 Jul 2025
444 points (92.5% liked)

Technology

72957 readers
2852 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
444
Password manager by Amazon (lemmy.world)
submitted 1 day ago by kokesh@lemmy.world to c/technology@lemmy.world
146 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] gaylord_fartmaster@lemmy.world 0 points 12 hours ago (1 children)

They don't even have to be visible to the user and bitwarden will fill them in as soon as the page loads.

I guess you didn't read most of the comment.

[โ€“] Cocodapuf@lemmy.world 2 points 3 hours ago* (last edited 3 hours ago)

No, he did, here's where the confusion is.

Serinus is asking if the site in question needs to be compromised. In other words, can the attacker compromise a random site to fool your password manager into entering credentials for Gmail.com, or does the attacker have to compromise Gmail.com to do that?

Because those two attacks are very different levels of complexity.

And frankly, if someone compromises the site you're actually trying to visit, there's simply no defense against that at all.