Bug#1007914: Bug#1006917: kpcli: "not well-formed (invalid token)" when opening a file

Rhonda D'Vine rhonda at deb.at
Fri Mar 18 17:23:44 GMT 2022


   Hi,

* Lester Hightower <lester.hightower at gmail.com> [2022-03-18 16:12:45 CET]:
> I do not equate your one, esoteric data access problem with justification
> for removing the package from Debian.

 Pasting data into the comment field of an entry is nothing I would
anywhere closely consider esoteric, rather the opposite.  And that a
tool would write data out that it couldn't read back in is something
that is utterly confusing, to say the least, and a clear bug that is not
just annoying but can impact people's access.  That it was easy to fix
doesn't reduce the impact of the issue.

> There is no security problem and no data was lost. Even if you had not
> fixed the problem in File::KeePass yourself, there are many other
> programs that operate on KeePass files that could have been used to
> access your data.

 This is where you are clearly wrong.  I tried opening the file with
other keepass tools, and it boiled down to the same issue: There was
data in the XML that weren't valid, and thus couldn't get parsed by any
keepass tool.

 Please don't try to reason with things that aren't the case.
Rhonda
-- 
Fühlst du dich mutlos, fass endlich Mut, los      |
Fühlst du dich hilflos, geh raus und hilf, los    | Wir sind Helden
Fühlst du dich machtlos, geh raus und mach, los   | 23.55: Alles auf Anfang
Fühlst du dich haltlos, such Halt und lass los    |



More information about the pkg-perl-maintainers mailing list