What are some safety measures you take when downloading a new version of keepass? Checking the digital signature of the binary? Original keepass downloads are hosted on sourceforge which has not had the best history of integrity the way I see it.
Non-official site with a tampered version of KeePass
21–30 of 82 posts
Re: Non-official site with a tampered version of KeePass
#22Hah, the Linux version points you to the original website (only the Mac and Windows versions appear to be modified)! The year of the Linux desktop is truly here.
doesnt that just imply that these scammers thought the linux userbase to be too small to be worthwhile? the comparatively small userbase is actually an underappreciated security feature of linux ;)
i'm sure that if installcore supported linux, then the linux binaries would also be bundlers.
Re: Non-official site with a tampered version of KeePass
#23Pretty ironicly, Terms of use warn to be very careful when downloading files with an exe.,. Vbs,. Lnk,. Bat,. Sys, or a suffix com., Because these files may contain a virus or spyware !
Re: Non-official site with a tampered version of KeePass
#24What are some safety measures you take when downloading a new version of keepass? Checking the digital signature of the binary? Original keepass downloads are hosted on sourceforge which has not had the best history of integrity the way I see it.
Compile it from source, it's a standard Visual Studio solution that builds without issues.
Re: Non-official site with a tampered version of KeePass
#25What are some safety measures you take when downloading a new version of keepass? Checking the digital signature of the binary? Original keepass downloads are hosted on sourceforge which has not had the best history of integrity the way I see it.
Compile it from source, it's a standard Visual Studio solution that builds without issues.
Re: Non-official site with a tampered version of KeePass
#26Re: Non-official site with a tampered version of KeePass
#27Earlier quoted context omitted.
Compile it from source, it's a standard Visual Studio solution that builds without issues.
But there are no guarantees about the source either unless I am willing to audit all of it?
Re: Non-official site with a tampered version of KeePass
#28What are some safety measures you take when downloading a new version of keepass? Checking the digital signature of the binary? Original keepass downloads are hosted on sourceforge which has not had the best history of integrity the way I see it.
Re: Non-official site with a tampered version of KeePass
#29What are some safety measures you take when downloading a new version of keepass? Checking the digital signature of the binary? Original keepass downloads are hosted on sourceforge which has not had the best history of integrity the way I see it.
keepassxc