Hacker GitHub

← All repos

bitwarden/jslib

View on GitHub ↗ ★ 136 TypeScript archived

Common code referenced across Bitwarden JavaScript projects.

14 mentions on Hacker News by 10 people: 2 stories, 12 comments · first 2018-11-12 · latest 2023-03-19

Mentions per year 14 mentions · busiest year 2018 (4)
20082026
AllStoriesComments NewestTopOldest
  1. Someone should tell them! https://github.com/bitwarden/jslib/issues/52
    comment by sneak · 2023-03-19 · in Bitwarden PINs can be brute-forced
  2. …[0] https://bitwarden.com/help/article/is-bitwarden-audited/ [1] https://github.com/bitwarden [2] https://github.com/bitwarden/jslib/issues/52 [3] https://github.com/bitwarden/jslib/issues/52#issuecomment-78...
    comment by tmikaeld · 2022-01-04 · in Ask HN: What password managers can you recommend?
  3. …to the server Edit: Noting that there have been discussions about the default number of iterations. https://github.com/bitwarden/jslib/issues/52
    comment by novium · 2021-03-18 · in Bitwarden_rs: Unofficial Bitwarden compatible server written in Rust
  4. …the client password is straightforward due to their use of a too-fast KDF and low iteration count. https://github.com/bitwarden/jslib/issues/52 https://github.com/bitwarden/server/issues/589
    comment by sneak · 2021-03-02 · in LastPass Android app has got 7 trackers in it
  5. …an hour ago) that they'll fix this! Cool. https://community.bitwarden.com/t/switch-to-argon2/350/23 https://github.com/bitwarden/jslib/issues/52
    comment by FabHK · 2020-07-23 · in Bitwarden second security audit report
  6. https://github.com/bitwarden/jslib/issues/52 I am astounded to see this missing from the report. Apparently the report was just their external API configuration or something?
    comment by sneak · 2020-07-23 · in Bitwarden second security audit report
  7. …risk, and actually caps the max iterations you can configure, both on the client and the server. https://github.com/bitwarden/jslib/issues/52 https://github.com/bitwarden/server/issues/589 “It was audited” is meaningless if the audit…
    comment by sneak · 2019-12-15 · in A Dropbox account gave me stomach ulcers
  8. …at it now it will probably be some different code paths. So the getDomain() function I see under https://github.com/bitwarden/jslib/blob/dd46d5ecdd51f91dace5... is indeed using URL objects. It also knows that tld.js won’t handle IP…
    comment by jammygit · 2019-04-07 · in Should you be concerned about LastPass uploading your passwords to its server?
  9. …this is PIE Scott) reported the problem in issue 306171 on HackerOne which was closed out. [1]: https://github.com/bitwarden/jslib/blob/master/src/services/...
    comment by xxkylexx · 2018-11-12 · in Bitwarden Completes Third-Party Security Audit
  10. …such as 'aa' and 'aaa'. [1] https://community.bitwarden.com/t/add-an-ability-to-generate... [2] https://github.com/bitwarden/jslib/pull/12
    comment by Fnoord · 2018-11-12 · in Bitwarden Completes Third-Party Security Audit
  11. Yes, it's using RSA to encrypt a key, as one would hope. https://github.com/bitwarden/jslib/blob/b4fad203b94da53d3369... Usually when I see RSA-OAEP in a casual stroll through something's code, I stop there and move onto looking for other…
    comment by CiPHPerCoder · 2018-11-12 · in Bitwarden Completes Third-Party Security Audit
  12. …code yields the following: * It's using RSA-OAEP to encrypt AES keys (EDIT: formerly "some data") https://github.com/bitwarden/jslib/blob/b4fad203b94da53d3369... * It's using AES-256-CBC https://github.com/bitwarden/jslib/blob/b4fad203b94da…
    comment by CiPHPerCoder · 2018-11-12 · in Bitwarden Completes Third-Party Security Audit