@dangoodinYou mean cloud password managers?Using a desktop password manager, I don't see how any server would see my password except through some spyware.

@rootwyrm I'm not arguing with you. Sorry if it sounds like I am. I don't have the same technical background you do and am asking how the 7.8-severity vuln shouldn't be considered high severity because it involves fonts . . . bounds checking? I'm asking you to explain the reasoning behind your assessment as if I was a student in a security 101 class.

@dangoodin ...and shocked employees realising they're on the menu too.

@DaveMWilburn @dangoodin The ICAP integration is how I've seen it used. Most often on NAS devices or explicitly engaged during file transfer flows. I'm a few arms lengths away from the management of the product so I am limited on any deeper insight.

@dangoodin @rx13 It's FUDmongering.

@dangoodin Not sure how true this story is, but crypto is an unregulated wild west. Crypto exchanges crop up al the time. They lure you into complying with KYC, get a photo of you, get your address etc. Then if you buy a bunch of crypto they can see the transactions on the blockchain. So yeah, they know what you look like, where you live, what crypto you have - so potentially this can happen.

@dangoodin Better to be a [person] that doesn't use biometrics on a device that might get seized!