This is incredibly true. The ease of use I will admit got me to use other password managers in the past before I rethought my approach maybe 7 years ago. And any manager is better than the spreadsheet users will implement if we dont give them tools.
Absolutely. Like I said: it’s great software and they are doing all they can to mitigate the inherent risk it faces because it is one of their biggest attack surfaces. They do great work.
I’m saying I would just rather decouple passwords, and online sync, into two entirely separate sandboxes. For my purposes, I don’t need to centrally assign or manage my users passwords from the top down, the manager is a tool for them to use as they like, and they can store PID in there as well, so I shouldn’t have access in principle. I can reset the accounts I control, but I cannot unlock or recover their vault.
For a web managed service, through no fault of their own, there is a high likelihood Bitwarden will one day be vulnerable to a browser engine based zeroday at one point or another. And I have no doubt they will rapidly patch this. But it’s a matter of time. And bad actors will be constantly attempting to break this quietly.
My only point is, even if onedrive, or GDrive, syncthing, etc, were vulnerable to a similar zeroday, it’s not enough to compromise an encrypted vault file because even if an exploit grants access to the file, the KeePass vault management is still entirely separate from all online portions of the interaction, and an entirely different and separate exploit would be needed to exploit the database file if it was obtained, as the vault is not managed in browser.
So there is a much greater chance for me to be notified of a onedrive or syncthing vulnerability, and have time to update the services in my vault contents just in case, well before a brute force attack could (potentially) open it.
This has its own drawbacks, as if they do exfiltrate the file, they can use infinite brute force attacks to break any vault with low enough entropy, but a vulnerability in Bitwarden could expose similar if a bad actor managed to dump the contents.
There is no perfect solution, period. I just wager it’s less likely for two zero day exploits to overlap perfectly like that on both my enterprise file sync software and my publically unlisted, undocumented, and otherwise undetectable KeePass Vault file stored in an arbitrary location with an arbitrary name and extension.
Oh certainly. I just mean that in an extremely broad sense, Bitwarden adds 1 more threat vector by being an online service. As a metaphor, if presented with a safety deposit box in a bank, and a safety deposit box in a train station with CCTV, even if the latter is incredibly well defended it still carries more intrinsic risk by being accessible.
That’s all really. Bitwarden is great software. It being an online platform just has that inherent factor that a non-web solution doesn’t.
Aka, if there is a massive breach in webview or a critical fault in SSL cryptography, this can be exploited. And Bitwarden itself is an attack surface to exploit. But in an offline solution, the attack surface of a vault can only be exploited when you get back online, and somehow actively choose to expose this or have a breach. The reason I use onedrive for the work sync (privately I use syncthing) is it would take two massive simultaneous failures to have an exposure this way. The sync service would have to somehow expose the file to a bad actor, and the file itself would have to have an exploitable cryptographic flaw at the same time.
You can access it offline.
I do not mean to imply the One Drive is offline. It’s the syncing backend.
But if your internet is out, you can still open your vault and look up a router password, for example, because the vault is a file on your local machine.
I don’t understand the extreme love for Bitwarden. I understand it’s useful, but I want as few things with a webui and server instance as possible, especially passwords, the thing that should be most secure.
KeePass, vault saved into the user’s One Drive synced folder is sufficient. It’s secure, offline, and automatically makes backups. And migrates to the new system just by logging into One Drive.
Bitwarden and others worry me because they have a lot of exposed attack surface, comparatively, and require much more maintenance to keep secure imo. I don’t want to expose any of that to a portal or anything.
That said, I don’t hate Bitwarden, the bitwarden/vault warden software is incredibly solid for what it is.
So, by this logic, Post-War Japan was not a sovereign state.
How a country must operate during wartime versus peace is extremely different. And the UK in WWII also issued bonds and took debt. Were they no longer sovereign?
That part of your argument is ridiculous. Ukraine is an independent nation with its own sovereignty and territorial authority.
Did you follow a guide, or know one you could link? I’m thinking this is the path for me and my friends too.
People have to eat.
Fundamentally the US is broken, and people don’t have themselves to support themselves very long.
Medical debt can wipe out your meager gains incredibly fast. The stock market tanking erases your only real savings you may have had.
Under those circumstances, it’s hard to take action when your hustling to survive.
These kinds of questions are best discussed with a therapist if you can see one, but yes, you can improve, and it doesn’t mean you have to be solo to do it. But try not to let the relationship define you. You need to be a whole, complete person without the external validation. Taking pride in your appearance is good, but feeling like you cannot show your most intimate partner your bare face is some regressive thinking from older generations we should leave behind.
In time I hope you feel happier and more comfortable just being you, regardless of being with someone. Being able to find self worth solo makes you much, much more rounded as a person, healthier, and ultimately a better partner too. Good luck.
The comment above is a half serious joke, but you do seem rather desperate for the approval of your partner and their validation. This isn’t totally healthy, and on one hand can be suffocating potentially, but can also be abused by a bad actor if you happen to date one. And those kinds of partners can sense and prey on that part of you.
I hope you have some positive friendships and relationships to help offset whatever is driving this feeling in you. In a perfect world, I’d say speak with a therapist but who can afford healthcare nowadays.
This is a hard thing to just say, but I hope you can understand that some of your fear and jealousy here is probably stemming from a lack of self confidence.
I say this, because I hope you can reflect on that, and be aware that some partners will understand and exploit that if you are not careful. This guy doesn’t sound like that, but maybe your next relationship is.
As others have said, try to have open communication, and accept sometimes if your values are fundamentally different. Sometimes people just are. Some can have open relationships happily, some thing looking at porn is cheating. Without judgement, both can be valid as long as both partners communicate and agree on that.
My feeling is generally the more secure you are in yourself and your sexuality, the less jealous and the less concerned you will be come with these things, and the more confidence you will have to cut off shitty partners who violate the norms you set. If your relationship is okay with porn, but not dating apps, then fuck them of they are browsing Tinder, even “just to look”.
Communicate, but also value yourself. This guy may be perfect, but maybe he’s not perfect for you. And that’s okay. Your chances of meeting someone gold are far better than you think if you keep your head up and go in eyes wide open than try and ignore issues.
Anyways, I hope some of this is moderately helpful to you. I hope you and him can work out, but I also hope you don’t compare yourself to camgirls or porn, ever. Fantasies are just that, we all have them. And they should never hurt your self worth.
Be well.
I didn’t even know raccoon existed.
But I love that Lemmy has so many options.
Will check it out. Seems the dev is working on an update for Android 15 compatibility.
The TTS uses whisper and absolutely dominates. But it is garbage still as a swipe interface. It direly needs to catch up on that front before I can recommend it full-time to friends. I spend SO much time retyping things it gets wrong.
Been using Connect, and currently trying Summit (very nice interface).
I might give Thunder a try.
So long as this is genuone, and not a stealth sabotage, that’s a genuinely good response and reaction.
I would respond to them that that isn’t a bad idea, so long as the therapist isn’t “primed” on the issue, and you’re able to actually go in with a blank slate.
Also, no idea where you live, but in the US make sure your therapist agrees to keep your therapy notes in some kind of shorthand. Musk and Trump don’t care about violating HIPPA to harm your rights, so be smart yea?
This is the way.
Was good until around 4pm. Now I’m expecting a ton of staff to be panicking tomorrow, expecting cuts.
Don’t know what to tell them yet. Corporate hasn’t been able to make a game plan because everything has been a reality show this past month, and US trade policy is a surprise!
Sorry, just needed to vent. I really hope no one, myself included, gets let go over this.