Hacker News Reader

> My guess is their local workstation was compromised

You mean someone was physically at the laptop/desktop and could access the OS and apps? Maybe if the employee was working remote (covid?) from, say, a cafe and left the laptop unattended when refilling coffee?

Or something else? ... Hmm, could also have been eg a browser zero day that gave someone remote access to the computer? Or a dev tools supply chain attack?

View on HN

It's not that complicated. The local workstation could have had a trojan or virus that installed a keylogger or screengrabber.

Ok, thanks

Or someone watched over their shoulder. 1Password makes it all too easy to accidentally reveal your password within the app. Someone with a video camera just needs one clear frame - 1/60th of a second - with a good enough view.

Or keylogger?

Reply on news.ycombinator.com