In Debian, APT 3 gains features – but KeepassXC loses them

[UCyborg]

Meanwhile in the world of open source...

https://www.theregister.com/2024/05/22/apt_gains_keepassxc_loses/

TL;DR the controversial part, a software package under the name of keepassxc, providing binary distribution of well known password manager KeePassXC, was suddenly turned into a stripped down version by its maintainer and full version that everyone expected and uses was moved into a separate package. A whole set of features can be disabled using special compile-time flags. The package maintainer was rather undiplomatic about it, calling the full version crappy and development of included extra features misguided, citing security concerns while failing to provide evidence of any possible real-life security incidents. Some people got locked out of their password databases, others were surprised by suddenly ending up without the web browser integration etc.

"Just read the NEWS, bruh."

Edited May 26 by UCyborg

[Dixel]

15 hours ago, UCyborg said:

people got locked out of their password databases

Wait, what?!!? Someone stored their passwords in the cloud?

[UCyborg]

No, KeePass family of programs are about having a local database, KeePassXC has an option to add an additional factor to protect the database in form of hardware YubiKey, support for it was disabled as well in the new default minimal package. I know one online function has to do with retrieving websites' favicons, I don't know offhand if there's more functions that connect to the internet, but all these should be exclusively triggered by the user, not on its own.