News for hackers. Stuff that matters.

A comment on LastPass RCE vulnerability fixed. Parent comment

Re:LastPass RCE vulnerability fixed by problems on Tuesday March 21, 2017 @10:19PM (#13928035)
I would not suggest this as KeePassXC does not support the new KDBX4 format with the upgraded cryptography - only the old Keepass format which relies on a custom AES-based key derivation function, which I cannot in good faith recommend.

Once it's implemented I may reconsider, but for now at least, I'd shy away from it.

https://github.com/keepassxreboot/keepassxc/issues/148

[ Parent | on HN ]
Re:LastPass RCE vulnerability fixed by ktta on Tuesday March 21, 2017 @10:56PM (#13928164)
Thanks for the info!

Edit: Looks like it's close

https://github.com/keepassx/keepassx/pull/200#issuecomment-2...

[ Parent | on HN ]