Skip to main content
"I can't trust online password managers, it's way better to have a self-hosted version like Keepass... I'm a proud user of...
... what. the. fuck. " https://www.bleepingcomputer.com/news/security/keepass-exploit-helps-retrieve-cleartext-master-password-fix-coming-soon/

#infosec #cybersecurity #passwordmanagers

KeePass exploit helps retrieve cleartext master password, fix coming soon

The popular KeePass password manager is vulnerable to extracting the master password from the application's memory, allowing attackers who compromise a device to retrieve the password even with the database is locked.
Bill Toulas (BleepingComputer)
#cybersecurity #infosec #passwordmanagers
Hypolite Petovan
Hypolite Petovan  
•
@BrBr.Prime Apparently the master password still can’t be retrieved remotely, which is my main worry with online password managers.
@BrBr.Prime
⇧