https://www.kee.pm/tags/security/ Recent content in security on Kee Vault Ltd Hugo -- gohugo.io en-us Mon, 21 Nov 2016 00:00:00 +0000 https://www.kee.pm/2016/11/21/security-update-released/ Mon, 21 Nov 2016 00:00:00 +0000 https://www.kee.pm/2016/11/21/security-update-released/ All KeeFox users should update to version 1.6.4 (or 1.6.4b1 if you are a beta tester). For most users, Firefox will do this for you automatically. Both the Firefox addon and KeePass plugin will need to be updated. The button on the KeeFox setup page should update the KeePass plugin for you if you're on Windows but otherwise just manually copy the KeePassRPC.plgx file to the KeePass plugins folder as with most KeeFox updates. https://www.kee.pm/2016/10/18/security-documentation-update/ Tue, 18 Oct 2016 00:00:00 +0000 https://www.kee.pm/2016/10/18/security-documentation-update/ A small omission has been found in the KeeFox documentation which explains the different ways that you can protect the connection between Firefox and KeePass. It's not a serious problem but since this may have guided some people's choice of KeeFox configuration, I wanted to post a quick explanation of the situation. Firstly, thanks to lhernanz for bringing this to our attention. If your computer runs Microsoft Windows you can stop reading now - this only affects users that use KeePass on Linux, Mac and other Unix operating systems. https://www.kee.pm/2015/06/02/multi-what/ Tue, 02 Jun 2015 00:00:00 +0000 https://www.kee.pm/2015/06/02/multi-what/ Version 1.5 of KeeFox is not far away. Along with a lot of new features and improvements which will be announced soon, there is a very large hidden change which is necessary because of a large change to an upcoming Firefox version. I expect Mozilla will mention this when the new Firefox is released but it is a technical change which is designed to mostly go unnoticed. You don't need to know this to use Firefox or KeeFox but I thought some people might be interested to know a little bit about the change. https://www.kee.pm/2015/01/09/keefox-version-security-warning/ Fri, 09 Jan 2015 00:00:00 +0000 https://www.kee.pm/2015/01/09/keefox-version-security-warning/ All KeeFox users have just received a notification that their version of KeeFox is very old and requires upgrading. There are no known security faults with previous versions but as I'm sure you can understand, the reason this version warning exists is to remind you that running old unsupported versions does carry an inherently higher risk than staying up to date with the latest version. The latest version of KeeFox as of 9th January 2015 at 10:00 GMT was 1. https://www.kee.pm/2013/08/18/upcoming-releases/ Sun, 18 Aug 2013 00:00:00 +0000 https://www.kee.pm/2013/08/18/upcoming-releases/ KeeFox 1.2.5b1 released Version 1.2.5 is nearly ready to be released so beta testers will soon be upgraded to this new version with a few small but important bug fixes: A fix for Thunderbird 25A couple of bug fixes that caused some passwords to not save to KeePassDanish, French, Korean, Portuguese and Russian languages created / updated (some not complete yet)Fix for intermittent failed KeePass shutdown on Mono (Mac/Linux)Some other small changesBig changes in KeeFox 1. https://www.kee.pm/2010/12/11/keepassrpc-security-and-authentication/ Sat, 11 Dec 2010 00:00:00 +0000 https://www.kee.pm/2010/12/11/keepassrpc-security-and-authentication/ Another technical post here which explains why KeePassRPC is secure and how an application developer needs to handle authentication with the plugin to protect its users. Security conscious people might view a KeePass remote access system with fear and loathing and it is true that installing this plugin exposes a new attack vector. I’ll explain how KeePassRPC can be exploited to access a user’s password database but you will see that the installation of the plugin is safe provided that… A) Neither me nor any 3rd party developers of libraries used in this project have made a mistake in the plugin code B) Both client and server machines remain secured from 3rd party threats such as viruses, trojans, keyloggers, etc.