Live data from Hacker News

Firefox Lockbox

testpilot.firefox.com

1–10 of 156 posts

Re: Firefox Lockbox

#5
So can someone expand on this a little? What are the differences between this and something like LastPass (other than this isn't an add-on). Does it provide app autofill? Does it prevent the same plain text decoding that browser password managers typically have? Is this useful? I'm legit asking because I don't know and would appreciate a security person chiming in.

Re: Firefox Lockbox

#6
Love it. I don't love using LastPass, but I don't want to deal with the rough edges of KeePass either. Looking forward to the Android app. +1 for autofill API.

Re: Firefox Lockbox

#7
If this is any good I'll be considering it as a replacemnt for Keepass.

A bit off topic, but while looking at this I noticed another expirement - Firefox Side View. It looks like it lets you have two open tabs side-by-side in one browser window. This is exactly why I used the Tile Tabs[0] extension and had to switch to Tile Tabs WE[1] with the Quantum update. I'm happy to see this coming back without the WE workarounds.

[0]: https://addons.mozilla.org/en-US/firefox/addon/tile-tabs/

[1]: https://addons.mozilla.org/en-US/firefox/addon/tile-tabs-we/

Re: Firefox Lockbox

#8
From the link, it claims that this "gives access to all the logins you've saved in Firefox", but I thought it was common knowledge that in-browser password storage is insecure? [0,1]

If so, then this doesn't really promote much confidence in a product that appears to be a password manager. If they've addressed this issue, then that should probably be explicitly stated, although I understand the difficulties of that from a marketing perspective.

Maybe the reference to 256-bit encryption is a nod to this, with the expectation that those unfamiliar with the problems wouldn't be familiar with the differences between plain-text and encrypted storage?

Regardless, I think it's pretty promising that a browser is addressing this problem head-on, rather than leaving it to third-party companies to solve in a cross-platform way.

[0]: https://nakedsecurity.sophos.com/2018/03/20/nine-years-on-fi... (If you don't use a master password, which isn't required, I believe?)

[1]: https://www.wired.com/2016/08/browser-password-manager-proba...

Re: Firefox Lockbox

#10
post #5

So can someone expand on this a little? What are the differences between this and something like LastPass (other than this isn't an add-on). Does it provide app autofill? Does it prevent the same plain text decoding that browser password managers typically have? Is this useful? I'm legit asking because I don't know and would appreciate a security person chiming in.

The video shows the password being copied (to a clipboard), so I'm guessing it doesn't do autofill. Does iOS support autofill apps?
Post reply on HN