3 ms·
If you have local access to the user's account, couldn't you just switch the keepass executable to a modified version that just sends the database along with th
by mik1998 4y ago
If you have local access to the user's account, couldn't you just switch the keepass executable to a modified version that just sends the database along with the master password to anywhere you want?
I don't see how you can protect from this kind of "attack".
- usrusr 4y agoIt's not uncommon at all to see configuration less protected than executables.
- Ensorceled 4y agoAt least on the Mac, I get a warning about unsigned executables. If my 1Password.app got replaced by a hacked version, I would get a very suspicious looking popup from my OS. I need to explicitly grant my IDE permission to debug other processes every time, so reading the passwords is memory isn't a slam dunk either. And I can assure you, I have full write access to my files.