Six sided devops engineer and baseball fan

I am also @Quill7513@slrpnk.net, but this is my primary and more active account. The slrpnk.net account is for ecology and lemmy.world stuff

https://keyoxide.org/BAF9ACFBBA5B9A51A680D77CEF152DAE039C5CF5

  • 0 Posts
  • 31 Comments
Joined 1 year ago
cake
Cake day: June 4th, 2023

help-circle
  • Sure yeah. I think corpos suck, too. That’s why I don’t prefer 1password. But Firefox puts their passwords into a file, too (two actually). Key3.db and Logins.json, both with known locations, and encrypted using AES-256-GCM which is… Decent but I prefer to go a little more hardened. The thing with keepass is the following:

    1. Its open source, no corpo
    2. The file encryption you select can be as hardened as you want
    3. No one but you need know the location of your file
    4. It offers 2fa which Firefox password manager doesn’t
    5. Firefox password manager is more susceptible to social engineering attacks is mainly what I was worried about but it seems like you’ve got a good handle on it.
    6. You don’t have to integrate keepass with the browser to use it

    But I want to make it abundantly clear. @Dyskolos@lemmy.zip has not recommended storing your passwords in a file. They have suggested storing your passwords in a mechanism that can be as secure as your hardware is capable of securing and keeping the location of that up to your own decision making.

    But also. Promise me this. If you’re going to keep using Firefox as your password manager:

    1. Don’t use sync. That’s run by Firefox’s corporate arm, Mozilla PBC
    2. Use a primary password of at least 32 characters
    3. Consider rotating your password on a regular interval, like on your birthday




  • In-built password managers for browsers are straightforward to crack. Like… Terrifyingly easy. It’s much better to use something like Bitwarden, Vaultwarden if you don’t trust Bitwarden, 1Password if you really want the reassurance of paying someone for trust, or KeePass if you don’t trust anyone at all (I, personally, fit into this category).


  • Messengers are not protocols. They use protocols. Most XMPP clients use the same encryption scheme Signal does only without being dependent on a single specific server, allowing users to spread out. I recommend reading about the differences between targeting developing a platform and developing protocols. Once you do, you’ll see XMPP+Encryption in a better light than anything like Signal. The main problem in the current moment with XMPP+Encryption us that it isn’t where the people are. Us tech weirdos can start the push into that space a little bit, but we need “Normies” to adopt to, and for that we need to be clear on what were talking about. Comparing XMPP to signal doesn’t make sense. Comparing Cheogram to Signal does. And in the latter, cheogram frankly blows Signal out of the water for real privacy and security considerations



  • Yeah. I didn’t pull down my comments when I left, but the oldest ones from 2010-2012 are real fucking wrong-headed. That’s while I was still in college and hadn’t learned yet that the real messaging about how the world works was

    1. staring me right in the face
    2. not discussed as being about what its about by mainstream media outlets

    That was the era frat rap was not just allowed to exist, but with some regularity got mainstream popularity. The great irony is two big names from that space, Asher Roth and Mac Miller went on to do some really thoughtful and insightful work, and I think their journey of awakening to the harm their privilege did is what a lot of us went through. Like. I don’t think the majority of us were thinking enough about the importance of countercultural music movements. Now google and reddit get to be the kings of that toxic outdated way of thinking.

    The bad news is… That toxic outdated way of thinking benefits them. And now they’ll have a big data model that can post real seeming messages and amplify those shitty takes a lot of us grew out of







  • So they changed it from redneck to MAGA, and you felt fucking called out? They wrote a fucking ALBUM about how subsets of america are dooming everyone else during the Bush administration and you didn’t fucking realize Green Day doesn’t like conservativism and you went to their concerts and bought their music? Man WHAT THE FUCK ARE YALL OFFENDED BY!? THIS IS WHO GREEN DAY IS. THIS IS WHO THEY’VE ALWAYS BEEN. THIS IS WHAT they’ve ALWAYS STOOD FOR.




  • Yeah I’m not enjoying watching the collapse of a lifelong friendship in public view. Like I really feel for Kyle. He made one joke and its collapsing his career all around him. And you can say that that’s a case of play stupid games, win stupid prizes, but losing his friend like this didn’t have to be part of the deal. Even if Jack Black did or didn’t agree with Kyle and this was all about their personal safety, there’s still ways for this to be handled where it’s not Jack Black personally throwing Kyle Gass under the bus. They could even make a deal with the devil and have Ticketmaster be the bad guys (that’s allegedly why they get paid so much)