J. Hoffman & K. Morgan: Attacks on 1Password Local Security on macOS
A DEF CON 32 talk on the security of the 1Password desktop app for macOS. The researchers examined how well user passwords are protected when the device is already compromised.
The talk demonstrates several techniques for extracting local password vaults. The authors describe discovered vulnerabilities and architectural weaknesses, including issues in inter-process communication (IPC) and the use of third-party libraries.
It also covers vulnerabilities in Google Chrome that enabled attacks against the 1Password browser extension.
The talk demonstrates several techniques for extracting local password vaults. The authors describe discovered vulnerabilities and architectural weaknesses, including issues in inter-process communication (IPC) and the use of third-party libraries.
It also covers vulnerabilities in Google Chrome that enabled attacks against the 1Password browser extension.