News for hackers. Stuff that matters.

A comment on LastPass RCE vulnerability fixed. Parent comment

Re:LastPass RCE vulnerability fixed by EuAndreh on Tuesday March 21, 2017 @11:21PM (#13928250)
See also KeeWeb[0].

Also mutiplatform as KeePassXC, built on Electron. Even though it is built on JavaScript, it has 0 dependencies[1].

And the author responds well on external feedback/contributions[2].

It does support KDBX4[3].

[0]: https://keeweb.info/

[1]: https://github.com/keeweb/keeweb/blob/c651343f80f4f3d41c7d64...

[2]: https://github.com/keeweb/keeweb/issues/104

[3]: https://github.com/keeweb/keeweb/issues/326

[ Parent | on HN ]
Re:LastPass RCE vulnerability fixed by problems on Wednesday March 22, 2017 @02:21AM (#13928850)
> 0 dependencies

If bundling your devDependencies at compile time counts as "0 dependencies", nothing has any dependencies. In this case, the whole thing's built on electron - all of chrome's rendering engine is quite the dependency. The uncompressed Windows version is 137 MB on disk. Fatter than most any app should be.

[ Parent | on HN ]