Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords
Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords
blog.redteam-pentesting.de Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords
Sometimes, making particular security design decisions can have unexpected consequences. For security-critical software, such as password managers, this can easily lead to catastrophic failure: In this blog post, we show how Bitwarden’s Windows Hello …
3
comments
So if I understand correctly, if the user had enabled Windows Hello, then there is an (intended) "backdoor" access to Hello credentials by the Domain Admin? And this has now been resolved by Bitwarden because Microsoft says it was intended behavior.