KeePass – questionable security

Re:KeePass – questionable security by justizin on Tuesday June 16, 2015 @01:45PM (#9727492)

I broke into your e-mail and need to get you to force a password reset on some other account, so I maliciously modify to give you an invalid stored password.

[ Parent | on HN ]

Re:KeePass – questionable security by jokamoto on Tuesday June 16, 2015 @02:05PM (#9727652)

If the attacker already has control of the email address, they can reset the account without going to such lengths--just visit the site and request a password reset.

[ Parent | on HN ]

Re:KeePass – questionable security by negus on Tuesday June 16, 2015 @01:53PM (#9727560)

Could you please provide more details on suggested attack?

[ Parent | on HN ]