3 ms·
I tend to prefer open source but slightly obscure open source with a few unpaid maintainers and a very high attack surface? Yeah, I'd avoid that too. I have mu
by pydry 5y ago
I tend to prefer open source but slightly obscure open source with a few unpaid maintainers and a very high attack surface? Yeah, I'd avoid that too.
I have much more confidence in open source password storage that doesnt try to autofill. Theres much less that can go wrong. This is how I store banking passwords.
A serious vulnerability puts me off but not as much as a tepid ass response that tries to downplay the severity of a really bad problem.
That makes me consider the software radioactive.
- SAI_Peregrinus 5y agoKeePass (and the forks like KeePassXC) doesn't try to autofill passwords. There's a separate browser plugin (different download, not installed or recommended by default) for KeePass that did, and that's where the vulnerability was.
- pydry 5y agoI was alluding to this when I said "slightly obscure". I still use KeePass, but not that plugin.