• 23 Posts
  • 30 Comments
Joined 2 years ago
cake
Cake day: June 8th, 2024

help-circle
  • Wrong, it is a secure app. There has been no reproducible proof to the contrary. Most often people says it does not support PFS, but “PFS is only relevant in the case where your long term private key is obtained by the attacker. The only way this should occur is if the attacker has access to your device/seed” It would take a whole Bitcoin network billions of years to break just single user encryption, per my understanding.













  • Just a wild guess, but does it use your system keyring for credential storage?

    $ dpkg-deb -I proton-pass_1.32.6_amd64.deb|grep -E “key|xts|sec”

     Section: utils
     Depends: libgtk-3-0, libnotify4, libnss3, libxtst6, xdg-utils, libatspi2.0-0, libdrm2, libgbm1, libxcb-dri3-0, kde-cli-tools | kde-runtime | trash-cli | libglib2.0-bin | gvfs-bin
     Suggests: gir1.2-gnomekeyring-1.0, libgnome-keyring0, lsb-release
      Open-source and secure identity manager.
    

    applications in auto-start may query this service before it’s up

    I have been starting Pass manually couple of minutes after booting, so this should not be the problem. I do not know why, but now several times Pass remembered my settings. I suspect that I have used password for the 1st time to login Pass app, before I remember only scanning a QR code from my other device.