Forum Discussion

afrisch's avatar
afrisch
Occasional Contributor
23 days ago

op.exe considered harmful?

I’d like to raise a point about the current security model of op.exe, and how it affects protection against supply-chain or similar attacks. Consider a scenario where an attacker manages to execute ...
cli
discussion
feature request
secrets management
security
emilysmith's avatar
emilysmith
Icon for 1Password Team rank1Password Team
4 days ago

Hey Afrisch! Thanks for the suggestion, and my apologies for the delayed response here. As you mentioned, finding ways to "meaningfully increase the effort required for a malicious local process to enumerate and exfiltrate secrets" is top of mind for us right now! I'll pass your feedback along to the team.