azuth

I think it was accepted in systemd. There was no commit in the kernel because such things are really don’t belong in the kernel.

But the law it was a response too is horrible. If any ‘app’, regardless of it including any unsafe content (or content at all really) must ask for this information from the OS. Otherwise the developer and/or controller (which can be whoever installed the app) is liable for thousands of dollars.

This only makes sense if you think the only ‘apps’ that exist are ones written by FAANG.

Which move are you referring to? Because most of them include far more than that.

Edge is the only Chromium‑based browser I’ve tested that behaves this way. By contrast, Chrome uses a design that makes it far harder for attackers to extract saved passwords by simply reading process memory.

It decrypts credentials only when needed,

From the article abstract in the OP