Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M

markstos

@ markstos @lemmy.world

Posts
1
Comments
150
Joined
3 yr. ago

  • Why self host a password manager?

    Jump

  • LastPass doesn’t have your password, so it can’t be stolen during a breach.

    But 1Password goes a step further, also requiring a “secret key”, which also can’t be stolen.

    https://support.1password.com/secret-key-security/

    Even if an attacker manages to steal your encrypted data from 1Password and also guess your master password, they still can’t access your data without a secret key.

    For that reason, your 1Password account is more likely to compromised through your own device, not their server. And if your own devices are thoroughly compromised, no password manager can save you— the attacker can potentially grab all you type and see all you see.

  • Why self host a password manager?

    Jump

  • I evaluated both BitWarden and 1Password for work and 1Password generally won across the board.

    If you host yourself make sure backups are rock solid and regularly monitored and tested. Have a plan for your infrastructure being down or compromised.

  • Why self host a password manager?

    Jump

  • 1Password’s security model guards against this. Even if they are breached, your passwords cannot be decrypted.

    You are more likely to screw up your own backups and hosting security than they are.

  • Police officer's gun sucked away by powerful magnets in lab raid

    Jump

  • Journalists have avoid committing libel.

    In an active-voice headline they would need to add a word like “allegedly” or “reportedly”, which they could have done.

    If they report a claim that someone committed a crime and the person is found to not have actually done so, that’s grounds for a libel lawsuit.

    So reporting on alleged crimes is done carefully.

  • The purpose of podman quadlets?

    Jump

  • I like to manage services maximally with systemd so it was a natural fit for me.

    It did not seem difficult to set up web and database quadlets so they are properly networked.

  • Every tech company

    Jump

  • Or a misguided solution to prevent drug use in public stalls?

  • Recommend a KVM or Switch

    Jump

  • I tried a USB KVM switcher. I only recall there were serious issues and it didn’t last long.

    Now I use a high quality USB dock and physically unplug/re-replug a work and personal laptop. That’s been a simple and reliable solution.

    For my home server, I ssh into it.

  • More beans better

    Jump

  • OP hasn’t met 17-bean soup yet.

  • Calls for J.D. Vance to resign after he admits that he 'created' pet-eating story about immigrants

    Jump

  • Ballots are already getting printed and early voting will start soon.

  • Suggest a Laptop for me.

    Jump

  • Framework Laptop with AMD/Ryzen. My son uses one with Valorent, Minecraft and other games and they all seem to run smoothly.

    Also, very repairable!

  • Is bit rot really a threat that I should worry about?

    Jump

  • You don’t define bitrot. If you leave software alone with no updates for long enough, yes, there will be problems.

    There will eventually be a security issue with no fix, or a new OS or hardware it doesn’t work on.

    Backups can also fail over time if restores are not tested periodically.

    This recently happened to me. A server wouldn’t boot anymore, so we restored from backup, but it still wouldn’t boot. The issue was that we’d introduced change that caused a boot failure. To fix that by restoring from a backup, we’d need a backup from before that change. It turns out we had one, but didn’t realize what the issue was.

    The other moral is to reboot frequently if only to confirm the system can still boot.