Hacker News Reader

Are you trying to tell me what my threat model should be? That makes me suspicious...

No, actually only stating truly paranoid people would not use a 3rd party password manager. Else you still have somewhat trust in third parties, making you not paranoid.

Your reply however... stamps paranoid label on it :)

If you were that paranoid you wouldn't be using a web browser in the first place. After all, its some 3rd party software that has access to your passwords.

There seems to be a growing chatter on HN and elsewhere about how you can't trust free software because you didn't audit/write it yourself.

I'm not sure if people actually believe that or use it as a way to point out how they're smarter than other people.

Sure its possible that the free software contains something malicious, but such an attitude is not constructive. If you only used software you wrote yourself you might as well not use a computer. There are degrees of trust, balancing of risks, and free software has a much better reputation of not containing malicious code.

Don't forget about the OS, you probably didn't write that software either (you are doomed)... and even if you keep your password on paper or in your head, there could be a keylogger when the time comes to use that password.

Reply on news.ycombinator.com