[pass] Proposed change to prevent passwords from being displayed

Jason A. Donenfeld Jason at zx2c4.com
Sat Feb 6 20:22:03 CET 2016


What is your attack model exactly? Shared GPU buffers that the driver
doesn't clear as a performance optimization, so you worry about other
sandboxed processes who have access to GPU (like Chrome) learning the
password? Or is it just an issue of the person looking over your
shoulder being able to memorize randomly generated 17 character&symbol
passwords really fast?


More information about the Password-Store mailing list