Physics and Free Software

  • 1 Post
  • 58 Comments
Joined 1 year ago
cake
Cake day: June 5th, 2023

help-circle




  • There’s often the ‘security vs. convenience’ tradeoff, but for most people you have both sides with Bitwarden over KeePass.

    Bitwarden is undoubtedly more convenient. If you can create an account, you can use it. I have a family account, and have both of my parents using it. The love it now, but given the friction to get them there in the first place, it would impossible to get them on KeePass. Especially because they wanted their passwords on all devices.

    Regardless of using Vaultwarden or KeePass, you need to have quite a bit of expertise to self host. And you are trusting your own ability to secure your attack surface. I’m sure many if not most in this thread can, but it would take me quite a while to convince myself I have. I would much rather trust security professionals.

    Somewhat, although, potentially related. Have you seen Bitwarden’s git repos? It is immaculately organized.

    Consistent, clear naming convention. There is literally one called ‘self-host’. If you put that much effort into keeping your code that useable/available/auditable etc. Oh yea. I’m going to trust you to handle security for me














  • We all have a fundamental right to privacy, which is constantly violated. Not just on a daily basis, but on a minute by minute basis.

    But to play devil’s advocate for a moment to assuage some FUD around posts like this, how many of the absurd amount of cookies overlap in otherwise innoculous ways. For instance, product tracking cookies. Say you bought a pumpkin on Amazon, and that drops a gorde cookie, a pumpkin spice cookie, a cornucopia cookie etc.

    That’s certainly not the same as buy a pumpkin, track your location around the nearest pumpkin patch, read your grandma’s emails about pumpkins, and collect information to determine your likelihood of buying another pumpkin based on your sexual orientation.

    The latter certainly exists, but does anyone know much about the former? How prevalent would they be in that 850?


  • My sell on password managers is quality of life. You never have to reset your passwords and you can use a hotkey to enter it faster than typing. Gone are the days of fat fingers.

    But I get where people have an issue. It’s one point of failure vs. many, but they don’t realize It’s easier to well secure the one than it is to not spread the same vulnerability everywhere.


  • As Kramer said. Levels. If tou layer your security 2 becomes a non issue. What you have, what you know, and who you are. Which plays into 1. The 3-2-1 of backup. 3 copies of the data. 2 different media. At least 1 off site. Suprising as it might be, writing a great backup is to write your password down. I have a piece of paper with my password in a lock box in my apartment, in a safety deposit box at my bank, and at my parent’s house