May 26, 20242 yr Meanwhile in the world of open source... https://www.theregister.com/2024/05/22/apt_gains_keepassxc_loses/ TL;DR the controversial part, a software package under the name of keepassxc, providing binary distribution of well known password manager KeePassXC, was suddenly turned into a stripped down version by its maintainer and full version that everyone expected and uses was moved into a separate package. A whole set of features can be disabled using special compile-time flags. The package maintainer was rather undiplomatic about it, calling the full version crappy and development of included extra features misguided, citing security concerns while failing to provide evidence of any possible real-life security incidents. Some people got locked out of their password databases, others were surprised by suddenly ending up without the web browser integration etc. "Just read the NEWS, bruh." Edited May 26, 20242 yr by UCyborg
May 27, 20242 yr 15 hours ago, UCyborg said: people got locked out of their password databases Wait, what?!!? Someone stored their passwords in the cloud?
May 27, 20242 yr Author No, KeePass family of programs are about having a local database, KeePassXC has an option to add an additional factor to protect the database in form of hardware YubiKey, support for it was disabled as well in the new default minimal package. I know one online function has to do with retrieving websites' favicons, I don't know offhand if there's more functions that connect to the internet, but all these should be exclusively triggered by the user, not on its own.
Create an account or sign in to comment