Hacker News Reader

How exactly is giving a third party access to your plaintext passwords "on the pareto frontier"? There are numerous options which do not involve doing so, some of which have better convenience than pass, so I'm genuinely curious how distributing your plaintext passwords more widely could possibly be at the frontier of security...

View on HN

Which options are more convenient? I'm always looking for something better.

What do you mean about distributing passwords in plaintext? Can you be more specific for me?

It's not the pareto frontier of security, it's the pareto frontier of security versus convenience. It's not exactly a "thing", it's just a mental model I use for thinking about security trade-offs.

Your plaintext passwords are never sent to lastpass.

If they are handled by a closed source browser extension distributed by them, how are you so sure?

Reply on news.ycombinator.com