Re:KeePassXC 2.4.3
by SamuelAdams on Wednesday June 12, 2019 @09:48AM
(#20164561)
Crash reports often include memory dumps. Firefox automatically reports these to Mozilla - there's plenty of other software that auto-reports crash data as well. If that crash data includes in-memory credentials, that could lead to your master password being compromised.
[ Parent
| on HN ]
Re:KeePassXC 2.4.3
by 292355744930110 on Wednesday June 12, 2019 @09:56AM
(#20164633)
KeepassXC disables core dumps[0].
[0] https://github.com/keepassxreboot/keepassxc/issues/2718#issu...
Re:KeePassXC 2.4.3
by blattimwind on Wednesday June 12, 2019 @10:16AM
(#20164848)
> Crash reports often include memory dumps. Firefox automatically reports these to Mozilla
Of the process in question, not the entire system. A Firefox crash dump can potentially still include credentials and private keys, of course.