jfktn5ntkfl

Do you think KeePassXC is better than original KeePass?

I'm more and more worried about a supply chain attack on LastPass/KeePass. To the point that I'm skittish about upgrading them.

It feels to me like we need someone with huge resources, like Microsoft/Gooogle/Apple... to buy them and apply their methods against this attack.

For example, where are the binaries built? Who controls the accounts used to upload the installers? Do they regularly pay security teams to try to find vulnerabilities?

To be clear, I'm not worried about the code, but I'm very worried about the downloadable binaries.