Aproposnix

an obscure person

  • 1 Post
  • 34 Comments
Joined 1 year ago
cake
Cake day: February 23rd, 2025

help-circle




  • I’ve no support for Iran, but if you’re going to mention how awful a state is who murders thousands of people, well then, Israel is even worse. Not only higher numbers but a genocide to boot.

    Ukraine has consistently supported Israels actions, which I guess it was for material support.

    Let’s not forget that the USA and Israel started this illegal war.

    There are no good guys in any of this, we can agree.

    Edit: dropped “the” from Ukraine as apparently its a Russian dog whistle. Never knew that, sorry.









  • You need to turn down your suspicions. Can’t ask questions without drawing the wrath of some users here…

    Do you not see that you are being aggressive? Who are you to tell me I have to turn down anything?

    Reread the the thread where you came out swinging about insecure servers and then continued over complicating the solution. It’s so condescending from the start:

    Not interested in selfhosting and risk a data breach. It’s imple: Who is better equipped to combat a hack? You or Bitwarden?

    All Ive been talking about is literately an encrypted file which is synced between various devices (regardless of sync method). You started talking like that before you even knew what you were talking about!

    Making yourself some kind of victim will not change that.

    I thought about it but in the end went with Bitwarden just because it’s convenient and didnt feel like entering the security minefield.

    This is all I was asking for. thanks for the feedback.

    The “gotcha” about conflicting (as you put it and trying to infer further bad faith conversations) was more about edge cases biting you in the ass. Not fun having to search accounts if you expect them to be securely saved in the vault but not being there.

    As I have said, I have been using this for about 15 years. There is no adge case. I was not even trying to convince you to switch from whatever password service you were using. I simply was looking to understand why.

    …under the assumption a corp that is specializing and programming a security product is probably better at it than me. And so far the behavior from Bitwarden after being audited and their current breach-history gives me enough faith for now.

    I have zero trust in any corporation. I will always take responsibility for my own security as much as I can. Being dependent on corporations, esp., digital tech corporations has led us to where we are today. Keepass is a zero trust solution for me. I don’t have to worry too much about where I place it (even Onedrive or Google Drive if needed).

    I have no issue with Bitwarden as a project, but I wouldn’t trust any server that is tasked with managing my passwords. I will do it myself.

    For what it’s worth, Keepass has been audited multiple times, including from the EU and I think the EU has (had?) Bug bounties for it. Germany and France definitely audited it.


  • I’ve been using Keepass for about the past 15 years.

    When you jump into the middle of a conversation, this is what happens. In fact, I already answered your question. Even though you seem to be acting in bad faith, and you’re trying to get a “gotcha” out of me… I’ll elaborate a little

    I use a Nextcloud Server (there are other network sync tools as well). I have the Keepass file on the server which syncs with my remote devices. If I make changes to the database, it syncs with the cloud server which pushes the changes to the other devices. I have NEVER had a situation where I needed to make changes to the databases on two or more devices in parallel, nor can I think of a use case. My guess is that in such a situation, whichever file was saved last would be the one last saved by Nextcloud (overwriting the other edit). So your “gotcha” is valid but rare. The other option is to use the web app for Keepass in Nextcloud (not sure if it’s still being developed though, it’s been a long time since I used that).

    Anyway, the point of my question was to understand why people use a cloud service for this when it can be easily done (and be safer) than relying on a 3rd party cloud. From what I can tell it’s “convenience”.





  • AproposnixtoTechnology@lemmy.worldBitwarden 100% price increase
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    5
    ·
    6 days ago

    Can someone please help me understand why you would want to have your passwords in the cloud? I’ve been using Keepass for about the past 15 years. I always just sync the db between computers/mobiles. Its never been an issue. Is having it in the cloud really that big of an advantage?