News for hackers. Stuff that matters.

A comment on LastPass autofill exploit. Parent comment

Re:LastPass autofill exploit by crdoconnor on Wednesday July 27, 2016 @07:31AM (#12171942)
KeePass, but I'm not 100% on that one either.
[ Parent | on HN ]
Re:LastPass autofill exploit by toxican on Wednesday July 27, 2016 @08:06AM (#12172088)
Why not? I've been using it for about a year now (switched from LastPass) and haven't had any issues. Kind of miss the in-browser features of LastPass, but seeing as how those are what's being exploited, maybe not so much!
[ Parent | on HN ]
Re:LastPass autofill exploit by theandrewbailey on Wednesday July 27, 2016 @08:54AM (#12172319)
There are browser extensions that work with KeePass. This LastPass vulnerability makes me wonder, too. I wish the KeePass site would be 100% HTTPS, though, but the maintainer is a jerk in that regard.
[ Parent | on HN ]
Re:LastPass autofill exploit by Quiark on Wednesday July 27, 2016 @09:14AM (#12172440)
Be careful about browser integration https://github.com/pfn/keepasshttp/issues/258
[ Parent | on HN ]
Re:LastPass autofill exploit by jsight on Wednesday July 27, 2016 @11:36AM (#12173660)
I use KeePass as well, but I have never tried it with a browser extension. That seems a little dangerous to me.
[ Parent | on HN ]