jviide

1Password has a pretty good white paper explaining their security design (PDF behind the link): https://1passwordstatic.com/files/security/1password-white-p.... The parts "How Vault Items Are Secured" and "How Vaults Are Securely Shared" go into sharing passwords in a vault.

For the record, Bitwarden's white paper is a good read as well. Available at https://bitwarden.com/help/article/bitwarden-security-white-....

(edit: fixed typos)

(Original tweeter here.) It seems that this is already fixed in Chrome 73 beta: https://twitter.com/jviide/status/1097199686849581057

Also setting "Enable network service" to disabled in chrome://flags appears to fix it: https://twitter.com/jviide/status/1097202611806261248