bwbug

Vulnerability: Chrome extension saves vault in persistent local storage after logging out and exiting Chrome

4

### Steps To Reproduce 1. Log into vault using Chrome extension 2. Log out of vault on Chrome extension 3. Exit Chrome 4. Navigate to %LocalAppData%\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb 5....

"ERROR: Unable to list devices for connection" and "PC/SC" warning in ykman

3

- YubiKey Manager version: YubiKey Manager (ykman) version: 5.0.1 - How was it installed?: Downloaded `yubikey-manager-qt-1.2.5-win64.exe` from [yubico.com](https://www.yubico.com/support/download/yubikey-manager/). - Operating system and version: Windows 11 Version 22H2 (Build 22621.2861) -...

Suggestion for Attributes: Shannon & Brute Force Thresholds Revisited

26

Your treatment of entropy per letter in the attributes (and as explained in your blogs) is interesting, but I think that to ensure a passphrase will not be too short,...

User Verification PIN implementation is not compliant with FIDO specs

2

### Steps To Reproduce Register a passkey at [passkeys.io](https://www.passkeys.io/) and store it in your Bitwarden browser extension, then perform the following tests (sign out after each successful login): 1. Set...

"Never" timeout warning stuck in infinite loop

1

### Steps To Reproduce 1. Go to **Settings > Account Security**. 2. Set Vault Timeout period to "Never", and click Yes on modal pop-up with "Are you sure" warning. 3....

Make BEGIN and END tags easier to type

3

For use-cases in which the shares will be distributed in hardcopy and _manually_ typed for decryption, typing in the current BEGIN/END tags is unnecessarily cumbersome (especially with arbitrary requirements such...