"Properly implemented" is doing the heavy lifting in that sentence.
Four paragraphs down from your quote is this:
Their attacks ranged from integrity violations affecting specific, targeted user vaults to the complete compromise of all vaults within an organisation using the service. In most cases, the researchers were able to gain access to the passwords – and even make changes to them.
If E2EE were properly implemented, the above would be impossible.
This is what Bitwarden claims to do, and yet we have a paper showing that with a compromised server there exists a vulnerability:
Their attacks ranged from integrity violations affecting specific, targeted user vaults to the complete compromise of all vaults within an organisation using the service. In most cases, the researchers were able to gain access to the passwords – and even make changes to them.
Natura's research reactor is designed to first prove the LFMSR concept at megawatt scale, then be converted to prove that MSR reactors can reprocess existing nuclear waste as a percentage of its fuel. Which means we could take all of the current stockpile of nuclear waste and re-burn it to the point that it's 90% consumed (instead of 5% consumed today) and leave a waste product that decays to safe levels extremely quickly (tens of years).
Sure, but at the end of the day even if you don't update your vaultwarden server or you rely on an insecure storage sync system like dropbox, your actual vault is encrypted with a key that only you know. Even if your server is hacked or the kdbx is leaked, your passwords are safe until someone breaks AES.
Contrast that with hosted services, who could very easily attach their own keys to your encryption key (whether now or in the future at the behest of the state) and you'd be none the wiser. E2EE doesn't matter much when the other end is controlled by someone else.
I'm not disagreeing that most people just want something to work without thinking about, and for that reason I'm glad that services like bitwarden and lastpass and protonpass exist. My intent was not FUD, just shining a light on the fact that keeping your passwords secure does not require trusting a company.
If the password manager server is hacked and compromised, then syncing your passwords with the compromised server will lead to compromised passwords (duh)
None of the providers tested have (or have had in the past) compromised servers.
and an observation or two:
Vaultwarden is free, self-hostable, and doesn't rely on trust in a third party.
Keepass (and its client variants, like KeepassXC which is pretty great) is even more secure because there is no server, just an encrypted file you can store anywhere.
Speaking of, does anyone know of a Lemmy android client that allows hiding posts from new accounts? Boost doesn't do it and it's also a bit buggy. Bonus points if available on F-Droid
Sure, and to be clear I mean a liberty and peace that includes everyone that has historically been marginalized and abused by this nation's governments and by people who think they're superior to everyone else.
The problem with a melting pot (particularly one that was started by murdering and stealing land from a continent's worth of indigenous people) is that it puts bigots right next to the people they hate.
The benefit of a melting pot is that if the incoming generation can avoid being programmed into hatred by their parents, society trends toward true equality and equity.
I'm trying to maintain optimism that this current extreme escalation is the flailing death throes of a generation raised into bigotry and self-aggrandization, and that we'll come out the other side of this being a better society (the younger generations today are so much more openly altruistic and progressive on the whole).
In a sane world, any one of the atrocities would be enough to put a stop to these people.
In a realistic world, shining a light on all these different atrocities would be sufficient to convince enough people to protest/threaten the power of the spineless patricians who refuse to convict and remove the fascists from power. For example if Billy Bob the redneck says "I'm fine with kidnapping brown people but fiddling kids is too far!" then Epstein might convince him to support impeachment/removal.
In the current clown world we live in, nothing that the fascists say or do will un-brainwash their base, and somehow that's enough to prevent everyone else from making a cohesive stand against the evil.
So to answer your question: no, it's not worse. It's a desperate attempt to make something start tipping the scale back toward liberty and peace.
I'm not saying it's suitable for someone trying to be a professional fortnite player, but it's perfectly playable without noticeable latency.
Fortnite is free on GeForce now (I think for X hours per day/session), and fully unrestricted on Luna if you already have prime.
End of the day it lets me enjoy spending time playing a game with my kids that they love, and doesn't cost me anything or require me to dual boot. It's not for everyone but it's an option for some.
Nope, I decided to go straight into the deep end a couple years ago. I tried out a few different distros, ran Bazzite for a good while but was having issues with openvpn and my workplace's old-ass endpoint, switched to Fedora + Plasma and haven't touched windows at home ever since. Still have to deal with it at the office but at least that's not my problem to manage.
Homelab runs debian pretty much exclusively, which is stable and reliable.
It runs just fine with Chrome + an extension to spoof a Windows user agent + either Amazon Luna or GeForce Now. Probably any other "play remotely in browser" service as well, but those are the ones I've used.
For what it's worth I also played with this method when I was running Windows, because I don't want to install a rootkit just to play a kids game.
I have tried it with Chromium and Librewolf, it works okay but I would get random input lag sometimes. Fortnite is basically the only reason the Chrome flatpak exists on my system.
But then people just think you're a dirty government spy. I prefer "IDPL" for "I don't practice law" because it's fun to pronounce.