Sometimes, making particular security design decisions can have unexpected consequences. For security-critical software, such as password managers, this can easily lead to catastrophic failure: In this blog post, we show how Bitwarden’s Windows Hello …
  • flooppoolf@lemmy.world
    202·
    6 months ago

    I promise that posting to one instance will get it shown across lemmy. You don’t need to cross post 5 times.

    • Annoyed_🦀 🏅@monyet.cc
      102·
      6 months ago

      It’s the flaw of app that doesn’t lump together crosspost, webUI will just show one post. Besides, some people browse subscribe only, and small instance will need some work to have a lot of community shows.

      • flooppoolf@lemmy.world
        3·
        6 months ago

        I’m starting to realize that the Memmy app is garbage

        Also you got crab rave in my head dundun do dunndundub

  • ironeagl@sh.itjust.works
    9·
    6 months ago

    So if I understand correctly, if the user had enabled Windows Hello, then there is an (intended) “backdoor” access to Hello credentials by the Domain Admin? And this has now been resolved by Bitwarden because Microsoft says it was intended behavior.