3 ms·
I dunno, I think Debian are being wise here. A while ago KeePassXC published a glowing audit report, but the report just ignored the scary stuff -- i.e. the th
by taviso 2y ago
I dunno, I think Debian are being wise here.
A while ago KeePassXC published a glowing audit report, but the report just ignored the scary stuff -- i.e. the things being disabled here like browser integration. I took a quick look, and thought the design could use some work -- but when I tried to discuss it they were very dismissive.
I did file a bug for one of the vulnerabilities we discussed, but I don't think they changed anything and didn't seem interested.
- jeltz 2y agoThis also disabled features which increased security like the browser plugin. The browser plugin increases the attack surface by adding more code but at the same does a lot for security by making sure to check domain names and avoid using the quite vulnerable X clipboard. With the argument of the maintainer he might as well delete the package since without any functionality nothing can be exploited.
- guilhas 2y agoNever used browser or clipboard I always thought keepass key feature was the 'Global Auto-Type' that works in most applications