News for hackers. Stuff that matters.

A comment on Six Dumbest Ideas in Computer Security. Parent comment

Re:Six Dumbest Ideas in Computer Security by necovek on Monday July 15, 2024 @07:21AM (#40966828)
> On Unix-like systems, KeePass 2.x uses ChaCha20, because Mono does not provide any effective memory protection method.

So only Windows seems to use secure memory protection.

[ Parent | on HN ]
Re:Six Dumbest Ideas in Computer Security by supertrope on Monday July 15, 2024 @09:00AM (#40967488)
https://keepassxc.org/blog/2019-02-21-memory-security/
[ Parent | on HN ]
Re:Six Dumbest Ideas in Computer Security by necovek on Monday July 15, 2024 @02:13PM (#40970134)
Ok, we seem to be moving the goalposts a bit.

My point is that you need to read up on it to ensure the implementation of memory handling for your password manager is really safe. As you demonstrate yourself, KeePass has different clients with different memory protection profiles which also depends on the system.

[ Parent | on HN ]