[–]▶ ca80ef (1) No.5396 >>5474 [Watch Thread][Show All Posts]
is it wise to write a password manager in an high level language like python?
____________________________
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ a4684a (2) No.5398
Yes, why wouldn't it be? A password manager is as secure as its handling of the data, including how it handles secrets in memory and in permanent storage. In fact, a high level language would be preferable for a password manager, as you don't need high performance and safety from buffer overflows and other memory exploits is ideal.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ c509e6 (2) No.5399>>5400
I would say it's less safe because of the popularity of Python.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ a4684a (2) No.5400>>5411
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ c509e6 (2) No.5411
>>5400
I didn't give it much thought to be honest. Consider it a shitpost
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ 4b0393 (1) No.5474
>>5396 (OP)
>not writing down your password
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ 5e9637 (1) No.5479
If you're writing a production-grade (what that means is up to you) password manager, you're going to want a rock-solid crypto library and a stack that you can ultimately trust. If Python provides that for you, then sure. You also have to consider the vulnerabilities and limitations of the programming language itself. You might also write a front-end in Python to a more secure (read: low-level) back-end, but then you have to deal with vulnerabilities at the language barrier and in any kind of RPC system you might use if you're not doing everything locally. I'd just stick with a low-level language like C, C++, or Rust. Something like Go should be relatively fine too for a personal-use password manager.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.