News for hackers. Stuff that matters.
Re:LastPass RCE vulnerability fixed by ktta on Tuesday March 21, 2017 @10:06PM (#13927991)
I would suggest KeePassXC, which in my opinion, looks better since uses Qt rather than mono so has a more native feel.

https://keepassxc.org/

Re:LastPass RCE vulnerability fixed by EuAndreh on Tuesday March 21, 2017 @11:21PM (#13928250)
See also KeeWeb[0].

Also mutiplatform as KeePassXC, built on Electron. Even though it is built on JavaScript, it has 0 dependencies[1].

And the author responds well on external feedback/contributions[2].

It does support KDBX4[3].

[0]: https://keeweb.info/

[1]: https://github.com/keeweb/keeweb/blob/c651343f80f4f3d41c7d64...

[2]: https://github.com/keeweb/keeweb/issues/104

[3]: https://github.com/keeweb/keeweb/issues/326

Re:LastPass RCE vulnerability fixed by problems on Wednesday March 22, 2017 @02:21AM (#13928850)
> 0 dependencies

If bundling your devDependencies at compile time counts as "0 dependencies", nothing has any dependencies. In this case, the whole thing's built on electron - all of chrome's rendering engine is quite the dependency. The uncompressed Windows version is 137 MB on disk. Fatter than most any app should be.

Re:LastPass RCE vulnerability fixed by problems on Tuesday March 21, 2017 @10:19PM (#13928035)
I would not suggest this as KeePassXC does not support the new KDBX4 format with the upgraded cryptography - only the old Keepass format which relies on a custom AES-based key derivation function, which I cannot in good faith recommend.

Once it's implemented I may reconsider, but for now at least, I'd shy away from it.

https://github.com/keepassxreboot/keepassxc/issues/148

Re:LastPass RCE vulnerability fixed by ktta on Tuesday March 21, 2017 @10:56PM (#13928164)
Thanks for the info!

Edit: Looks like it's close

https://github.com/keepassx/keepassx/pull/200#issuecomment-2...

Re:LastPass RCE vulnerability fixed by balladeer on Tuesday March 21, 2017 @11:12PM (#13928225)
For OSX I have been using this native app MacPass - http://mstarke.github.io/MacPass. Actively developed from what I see on Github.