Hacker News Reader

I use password manager browser extensions... but honestly they make me a little uncomfortable, and I'm slowly migrating away from them.

If your computer were a city, the web browser would be the high crime area. I may have my valuables in a locked safe, but it's a little bit self-defeating to carry that safe with me in the places where I'm most likely to be mugged.

View on HN

If you have a malicious extension, then under XUL I think it is game over. WebEx probably offers more isolation and/or protection. Also note that a malicious addon can possibly also record passwords that are pasted in manually from a password manager, or auto-typed.

On the other hand a website should not be able to get at any password stored in (or pasted into) the browser except its own.

Reply on news.ycombinator.com