https://fosstodon.org/@keepassxc/114544480029903918
edit: looks like its been taken down
You must log in or register to comment.
PSA: The amount of stars on GitHub can be botted and is not a good indicator to know if you are dealing with a legitimate repository. Even the commit history can be faked (although that’s less common).
This is why I never feel safe downloading a program from Github. I need a recognisable domain name website that google or duckduckgo has picked as the product.
No it’s not perfect, but it feels safer than a random github.
I need a recognisable domain name website that google or duckduckgo has picked as the product.
This doesn’t always work. For example, I used to (and still do) see a lot of fake websites when I l type revanced (https://revanced.app/) on duckduckgo, and I’ve nearly fallen for two of the fake ones before (I think two of .com / .org / .to…?)
Thankfully ublock origin warns users of this:
Otherwise, I’d have 100% downloaded some malware-loaded crap.
Just tried a search for Magisk and uBlock indeed does a great job at blocking all the scam websites.
It’s important to note that new scam sites won’t be picked up until someone reports them, so there’s still a chance you’ll be one of the first to a new domain.
Wait til you hear about npm.
I need to install Magisk.
Google:
1st result: their Github page
2: magisk-manager.fr.uptodownDOTcom/android
3: magiskmanagerDOTcom/
4: magisk-manager.fr.softonicDOTcom/androidKagi:
1st result: their Github page
2: magiskDOTme/ (icon showing it may be scam)
3: magiskmanagerDOTcom/ (scam icon)
4: themagiskDOTcom/ (scam icon)No way I’m clicking on anything but the Github page.
Kagi is somewhat better than Google, but you have to pay attention to the small warning icon.
I would say bot search engines do a bad job and shouldn’t show those results (or have an option “show me unsafe websites”)edit: uptodown and softonic might not be as bad. Still wouldn’t download from them.
Thank goodness for distro repositories with somewhat-vetted software.
i like Keepass, in fact I’ve been using it fot almost 2 years. Might consider going “GNU Pass” so I have more controls.
I used keepass since ages and about two years ago I switched to a self-hosted vaultwarden instance and I still think it was a great choice. So of you have a docker experience and a little VM lying around you could give vaultwarden/Bitwarden a try.
I’m not sure who they were trying to fool? Bluntly, if you’re keeping your passwords in a local repo using strong encryption via something like keepass, you’re generally not the kind of person to see “KeePassXE Pro ultra mega best edition” and blindly download it without vetting the source…
If it works once or twice it was probably worth it
I myself prefer to keep good ass IRL
