Probably some of you heard the news about KeePassXC in Debian.
"A few days ago, an Ubuntu user noted that the browser integration feature for KeePassXC had vanished, rendering the corresponding browser extension non-functional. As you can guess, this feature is essential, as it significantly justifies using such password managers.
A follow-up check by a member of the KeePassXC team revealed that the Debian developer had removed some functionalities from the application...
"Users who need this crap can install the crappy version but obviously this increases the risk of drive-by contributor attacks""
Some state that "It is generally a violation of Debian policy for an upgrade to break existing functionality it is also generally encouraged to provide builds that allow for choice and self determination for system’s operators".
https://linuxiac.com/debian-keepassxc-sparked-debate/
What do you think about this situation? I use KeePassXC and don't need fancy things from keepassxc-full. But, IMHO, it would be more logical to leave keepassxc package with full features and provide smth like keepassxc-minimal for folks like me.
"A few days ago, an Ubuntu user noted that the browser integration feature for KeePassXC had vanished, rendering the corresponding browser extension non-functional. As you can guess, this feature is essential, as it significantly justifies using such password managers.
A follow-up check by a member of the KeePassXC team revealed that the Debian developer had removed some functionalities from the application...
"Users who need this crap can install the crappy version but obviously this increases the risk of drive-by contributor attacks""
Some state that "It is generally a violation of Debian policy for an upgrade to break existing functionality it is also generally encouraged to provide builds that allow for choice and self determination for system’s operators".
https://linuxiac.com/debian-keepassxc-sparked-debate/
What do you think about this situation? I use KeePassXC and don't need fancy things from keepassxc-full. But, IMHO, it would be more logical to leave keepassxc package with full features and provide smth like keepassxc-minimal for folks like me.
Statistics: Posted by alienspy — 2024-05-22 20:20 — Replies 0 — Views 33