Comment by dpacmittal
5 months ago
For the same reasons, I imported all my passwords to Firefox and I'm satisfied with it. I have the option to self host if I don't trust Mozilla
5 months ago
For the same reasons, I imported all my passwords to Firefox and I'm satisfied with it. I have the option to self host if I don't trust Mozilla
Any malware or LLM with user-level filesystem access can attack the outdated KDF [1] and/or wait for Firefox to be running with an unlocked credential store and read the decrypted passwords from Firefox's process memory.
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=973759
Isn't it game over anyway once you have an adversary on your system capable of reading process memory?
[dead]