News for hackers. Stuff that matters.

A comment on LastPass release fix for DOM manipulation vulnerability. Parent comment

Re:LastPass release fix for DOM manipulation vulnerability by noja on Saturday April 01, 2017 @12:04PM (#14012729)
Enpass ticks all the boxes, except... no-one ever mentions or reviews it. Has there been a security audit? Is it reliable?
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by calvins on Saturday April 01, 2017 @12:27PM (#14012867)
It seems no security audit has been performed, but they plan on it at some point: https://discussion.enpass.io/index.php?/topic/404-security-a...

Their responses in that thread do not inspire confidence in the product for me, to put it mildly.

[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by noja on Monday April 03, 2017 @05:19AM (#14021536)
That was scary. I'm not going to be recommending Enpass.
[ Parent | on HN ]