4 ms·
KeePass is a free software, not a service that generates revenue. Why would you expect a free software developer that is entirely funded by donations (which mos
by TonyTrapp 5y ago
KeePass is a free software, not a service that generates revenue. Why would you expect a free software developer that is entirely funded by donations (which most likely won't even cover development costs) to pay 10,000$ to a security researcher finding a bug in their software or you will stop using their software? This is completely unrealistic. Bugs happen, free software exists. You cannot stop using all free software that had a security bug in the past that wasn't awarded with 10,000$.
- pydry 5y agoI didnt say I did expect bounties from them. I just said I'd avoid using this software. The fact remains that autofilling passwords in-browser has a gargantuan attack surface and hence the potential to go very wrong. You have to really trust whichever software you use for this. I expected better from lastpass because I used to give them actual money. I'm not upset that some random keepass extension did this but I also wouldnt use it either.
- SAI_Peregrinus 5y agoKeePass doesn't come with the browser plugin, BTW. It's a separate, optional download.
- pydry 5y agoI know.