![[BunsenLabs Logo]](/img/bl.svg)
You are not logged in.
- Topics: Active | Unanswered
#21 2026-10-14 08:02:41
- WizardofCOR
- Member
- From: Somewhere in the Desert
- Registered: 2023-07-28
- Posts: 115
Re: What do you remove and/or install after a fresh OS instalation?
I would hope that no one is storing credentials in browsers. That's like one of first and easiest attack surfaces/vectors exploited. I happen to know someone who does exactly that for a living - just sayin'.
Just a dude playing a dude, disguised as another dude...
Offline
#22 2026-10-15 02:40:27
- johnraff
- nullglob
- From: Nagoya, Japan
- Registered: 2015-09-09
- Posts: 13,617
- Website
Re: What do you remove and/or install after a fresh OS instalation?
^depending of course on how important those credentials are. Of course the browser is on the front line between your system and the wild world outside. But maybe there are some accounts it wouldn't be such a disaster to have cracked. Compromise between convenience and safety as usual.
...elevator in the Brain Hotel, broken down but just as well...
( a boring Japan blog (currently paused), now on Bluesky and Mastodon, there's also some GitStuff )
Offline
#23 2026-10-15 03:44:18
- WizardofCOR
- Member
- From: Somewhere in the Desert
- Registered: 2023-07-28
- Posts: 115
Re: What do you remove and/or install after a fresh OS instalation?
Heh - and of course, if any are 'reused' - another ouchie if so.
Browsers have been known to store credentials in clear text, which can be easily exfiltrated.
IMO, a solid password manager is definitely the way to go nowadays.
I can personally recommend ProtonPass if online sync-capabilities are desired, or VuuPass (made by our own Greenjeans) if a more local app is desired.
Stay safe, guys!
Just a dude playing a dude, disguised as another dude...
Offline
#24 2026-10-15 04:57:45
- johnraff
- nullglob
- From: Nagoya, Japan
- Registered: 2015-09-09
- Posts: 13,617
- Website
Re: What do you remove and/or install after a fresh OS instalation?
I keep most of my passwords in the physical form of pencil entries in a notebook.
A few less vital and often used ones are in Firefox's Password Manager, which itself is not all that different from a standalone password manager except for the major vulnerability of being a part of the browser software.
Of course "reusing" passwords on multiple sites is heavily deprecated everywhere. Yeah, maybe I did that 20 years ago. 
...elevator in the Brain Hotel, broken down but just as well...
( a boring Japan blog (currently paused), now on Bluesky and Mastodon, there's also some GitStuff )
Offline
#25 Today 03:35:50
- WizardofCOR
- Member
- From: Somewhere in the Desert
- Registered: 2023-07-28
- Posts: 115
Re: What do you remove and/or install after a fresh OS instalation?
It's kinda funny, many people new to security tend to laugh at keeping passwords in actual written form - failing to realize that a local physical copy can't be compromised over a network. Physical access is required. Bad for work environments, sure - but for home? Can't really get much safer honestly.
I'm still adamant against browser storage, of course. Like I mentioned earlier, a friend of mine makes a legitimate living as a security consultant by pilfering creds stored in peoples' browsers - he redacts and posts them routinely on LI.
So I'll always recommend the avoidance of browser-stored credentials.
For me (since I'll need them across multiple devices and multiple networks), I'll use a pwm.
Was using LastPass (for years), until their compromise(s) - went to Nord, used them for awhile. But their web-based login system SUX now and they're aligning with ad agencies that you have to opt-out of.
So ProtonPass has been the recent choice - it's great, and improving all the time. Love those Proton guys - they get it.
Anyway, rambling. Stay safe, peoples!
Last edited by WizardofCOR (Today 03:36:48)
Just a dude playing a dude, disguised as another dude...
Offline