News for hackers. Stuff that matters.

A comment on Suspicious iOS KeePass Client.

Re:Suspicious iOS KeePass Client by eternauta3k on Sunday May 21, 2023 @10:03AM (#36020976)
If this is malicious, then I don't understand why the evil code was in the public repository instead of just in the binary.
[ Parent | on HN ]
Re:Suspicious iOS KeePass Client by nightpool on Sunday May 21, 2023 @10:19AM (#36021105)
because people are stupid and maintaining a separate private fork is more annoying than it's worth?
[ Parent | on HN ]
Re:Suspicious iOS KeePass Client by lxgr on Sunday May 21, 2023 @11:51AM (#36022173)
If the intention here was really to steal passwords, it could also be deniability?

Uploading sensitive stuff to logging and/or analytics packages or third party providers is a surprisingly easy mistake to make – which in turn makes it an excellent avenue for plausible deniability.

It can be really hard to tell which one it was without inside information or a detailed investigation.

[ Parent | on HN ]