Re:KeePass – questionable security
by xenophonf on Tuesday June 16, 2015 @02:26PM
(#9727798)
May I emphasize this sentence?
I don't know enough about cryptography to be able to say whether it's possible to break a particular cryptographic protocol by blindly altering the ciphertext, but I do know plenty about human nature and backups. It's _highly_ unlikely that normal people keep more than a handful of backups. My own personal backup retention limit is on the order of 30 days, and that's with careful planning. Silent, on-going data corruption happening to a password database seems like a very reasonable thing to concern oneself with, especially if one's expectation was that the password manager would throw some kind of data integrity error whenever said database was accessed.
[ Parent
| on HN ]
There are no comments on this comment yet.