Hacker News Reader

These evaluations all happened on Windows, which is notoriously bad at protecting memory from snooping by other processes.

Does anyone know how well MacOS versions of all the password managers would have fared? I suspect the JavaScript based password managers like LastPass would fare similarly, but it would be interesting to see if 1Password has better security on MacOS than Windows.

View on HN

MacOS isn't much better. I just tried it myself using fridump[0] and was able to see plaintext secrets when dumping memory.

But as pointed out above, if someone has access to dump your machine's memory then you've got bigger fish to fry.

[0] https://github.com/Nightbringer21/fridump

> Windows, which is notoriously bad at protecting memory from snooping by other processes

Whaaat? I'm going to call citation needed here. Afaik there is not significant difference in the memory protection model between any of the mainstream OSes

Reply on news.ycombinator.com