Curated security research, vulnerabilities, advisories and tools for practitioners.

1Password Secret Retrieval — Methodology and Implementation

Summary

Background and Motivation 1Password is a password manager developed by AgileBits Inc., providing a place for users to store various passwords, software licenses, and other sensitive information in a virtual vaults secured with a PBKDF2 master password. Downloading a copy of the software and using it for awhile, I noticed that so long as 1Password remained unlocked, the […]
Published
Collected