i'm surprised by the reactions here. maybe i am misunderstanding the blog post, or maybe others are?<p>as far as i can see they are being extremely paranoid. they seem to be monitoring (and following up on!) traffic flow, which is itself pretty impressive, are flagging this even though they have no other error signs, and have done a good enough job in their implementation that can say, without any more details, that the only risk is via brute force cracking.<p>i use keepassx locally, but my take on this is that they are way better than average. this kind of report would make me use a company, not switch from them.