The article clearly states "Roboform Everywhere Portal" as opposed to the Roboform desktop application.
#Roboform online password
If you use the Roboform desktop application, the master password & passcard data do not travel across the network. RoboForm does not transmit any decrypted contents of the user data files (passcards/identities/safenotes) over any network.
RoboForm does not pass Master Password over any network The "Roboform Everywhere" portal was still insecure, but that clearly wasn't going to change any time soon.Ī couple of days ago, a concerned Roboform user sent this: So they couldn't replicate it, assumed it was inaccurate and publicly berated the researcher that reported it! Charmin'!Ī week later, Chris Gomez raised the issue again.Īlthough they still couldn't replicate it, they did at least release a patch. Security is our number one priority and we are working to ensure that no vulnerability exists, as it has still yet to be confirmed Fortunately, The HackerNews pulled the article and replaced it with this something which Scott Helme pointed out. In both replies, you'll note a link to the HackerNews article which tried to debunk my claims. Well, 6 months have passed and although there's been no official public response from Siber Systems, they have made a number of comments to journalists and customers by email/Facebook and support tickets during which I've been labelled as "misinformed", "unpleasant" and "sarcastic". You may recall, I recently published an article entitled " How secure is Roboform: The 5 Minute Challenge".
0 kommentar(er)
