Comment on KeePassXC 2.5parentComments−apta6yWouldn't this sort of software be better written in a safe language like C# as opposed to C++?−sha666sum6yIt runs locally, and if the attacker has that much access, in most scenarios there isn't anything stopping your adversary from just logging your keystrokes and curling the keystore to a remote server.−sebazzz6yYes and no. In a language like C++ you might have more control on encrypting and zeroing out sensitive memory.−moocowtruck6yno how else would we get your passwords?
Comments
Wouldn't this sort of software be better written in a safe language like C# as opposed to C++?
It runs locally, and if the attacker has that much access, in most scenarios there isn't anything stopping your adversary from just logging your keystrokes and curling the keystore to a remote server.
Yes and no. In a language like C++ you might have more control on encrypting and zeroing out sensitive memory.
no how else would we get your passwords?