News for hackers. Stuff that matters.
Re:Vulnerabilities in Password-Manager Apps by maccard on Tuesday February 28, 2017 @03:16PM (#13757433)
I swapped to keepass, and I use sync to synchronise the file. It works reasonably well!
Re:Vulnerabilities in Password-Manager Apps by hackuser on Tuesday February 28, 2017 @04:37PM (#13758174)
> It works reasonably well!

How does it not work? Confidentiality and data integrity are essential for password managers; they can't work most of the time in those regards.

Re:Vulnerabilities in Password-Manager Apps by TheDauthi on Tuesday February 28, 2017 @05:20PM (#13758719)
It's file-based. If you have a copy open in one location, open a copy in a second, save the second, then make changes in the first and save the first, you can override the second copy's changes.

That said, KeePass 2.x (which came out in 2010/2011, but some people still use the old version) has synchronization built-in, and on top of that, there are plugins to make it keep backups or update a secondary database. It's the KeePass clones that have their own implementation of the internals where you can run into problems.

Re:Vulnerabilities in Password-Manager Apps by maccard on Wednesday March 01, 2017 @06:24AM (#13762924)
IT does what it says on the tin; it's a password manager. However synchronisation is extra (I use sync to sync the file, and because I'm on iOS I have to manually import the file into the app).

The recommended iOS app (MiniKeepass) doesn't support Touch ID to unlock the database (a PITA with a long master password, which I already have to unlock my device), so I'm using keepass touch, which is a MiniKeepass fork, but with ads, and they've been ignoring my requests for source code (MiniKeepass is GPL).

Browser integration is a pain; you haveto install an extension to Keepass, and then to your browser, and set them up correctly. Steps are at [0]

It works, but is a lot more hassle (which as a result means I'm more likely to skip it and use an insecure password) than Lastpass was.

[0] https://addons.mozilla.org/en-GB/firefox/addon/passifox/