Comment

gaylord_fartmaster@lemmy.world ⁨18⁩ ⁨hours⁩ ago

Right, “maliciously sneak”, as in they’ve either gained access to make changes to the site ditectly, or they’ve found a way to inject their scripts to steal creds.

source

Sort:hotnew top

Serinus@lemmy.world ⁨18⁩ ⁨hours⁩ ago
And how is that any different from not having a password manager?

source
- gaylord_fartmaster@lemmy.world ⁨18⁩ ⁨hours⁩ ago
  
  They don’t even have to be visible to the user and bitwarden will fill them in as soon as the page loads.
  
  I guess you didn’t read most of the comment.
  
  source
  - Cocodapuf@lemmy.world ⁨9⁩ ⁨hours⁩ ago
    No, be did, here’s where the confusion is.
    
    Serinus is asking if the site in question needs to be compromised. In other words, can the attacker compromise a random site to fool your password manager into entering credentials for Gmail.com, or does the attacker have to compromise Gmail.com to do that?
    
    Because those two attacks are very different levels of complexity.
    
    And frankly, if someone compromises the site you’re actually trying to visit, there’s simply no defense against that at all.
    
    source