• 1 Post
  • 187 Comments
Joined 2 years ago
cake
Cake day: October 9th, 2023

help-circle
  • I am curious why Librewolf isn’t for you?

    Overall I’ve had no issue with librewolf. It’s runs just like Firefox without some of the bloat. The very few sites I’ve found don’t work, don’t work on FF either (usually payment/online stores with popups and shit). Download whatever extension, change the settings and even sign into Firefox cloud. Yes, you’ll make your “fingerprint” more unique but, the other security improvemts/defaults make it a worthy trade off.

    Biggest annoyance is by default cookies/logged in sites are wiped on close. That can easily be changed globally, or white list what you want to save site settings for. Signing out of websites is a good habit anyway, especially ones with payment attached.

    The neat part is there’s a lot options to pick from, some of them are doing cool things like the one outta Japan Floorp looks interesting.


  • The way I see it, Password managers protect best against website password leaks.

    By making it very easy to have different passwords for everything, one password leak won’t compromise your entire online portfolio.

    The self managed nature of keypass and vault warden makes them less susceptible to a major fup outside your control, i.e A business can’t mismanage your passwords resulting in a major leak or deletion. For better or worse, you’re in charge of your own database.

    They won’t protect you from various malware, except maybe a key logger that doesnt know how to copy the file? If someone actually wanted into your database without brute force, they could figure it out. If you find malware that’s been on your system for a while (longer than you download something and AV stops it before running), change all your passwords. Luckily you’ll have a handy list of everything.

    Edit; another advantage is if they take over the computer/steal files there’s not much they can do with an encrypted password file, its better than a txt doc with all your stuff.





  • i know you said no pixel, however … Pixel + GrapheneOS works great and easy to install.

    GrapheneOS takes the google spyware out of pixel. However, it does add a slightly steeper learning curve to Android. Not too bad, just a few more options to poke at.

    It doesn’t cut you off from the google play store, instead sandboxing it preventing from accessing data outside its own service. This is important if you need specific apps for work, bank, etc.

    For open-source apps F-Droid app store is your friend.

    Unfortunately, GrapheneOS only works for pixel. There are other options you could look into such as LinageOS, but those goes beyond my personal knowlage. Specifically you want a phone that allows you unlock the bootloader.

    Avoid Samsung like the plague.

    Any version of Android that comes pre-installed is going to have Google Spyware and bloat. Manufactures, especially Samsung, spin up their own version of Android so then you have both Googles bloat and Samsung bloat.




  • You’re trusting a third party to store, protect and not loose your passwords behind a vault you never see.

    Google had messed up pretty bad a few months ago. Last pass has had issues. I’m unaware of 1pass having issues, but I don’t exactly pay close attentions. https://www.keepersecurity.com/blog/2024/08/01/google-password-manager-loses-millions-of-passwords/

    These days its not if something bad happens, its when and how bad.

    Keeping your database private, also reduces the risk of random attacks a lot. If you’re passwords aren’t part of a big data leak, they can’t use them. Hackers are after the big payouts or the easy payouts. They’re less likely to spend a lot time trying to crack your one database, when they can move on to the next guy who keeps them all in a word doc.


    If you do have reason to keep using 1pass for whatever reason, be it convince or lack of time to switch, I highly recommend at least getting your important (email, bank, etc) passwords duplicated to something like Keepass (back that file up too) so if/when 1pass ever looses your passwords, you at least have a solid starting point for recovery. Its also good way to familiarize/try out a few options with out dedicating to a full switch.


  • Friendly reminder: If you haven’t diversified your passwords yet, get a password manger and do it!

    Its not an if someone gets hacks, its when.

    I don’t know if this hack included any user and password, but if it did, they will try the combo on other sites.


    KeePassXC, works great but you are responsible for your own file and syncing it between devices. (I use syncthing, but a cloud drive is a viable sync method, its all encyptyed) (iOS options limited)

    Bitwarden, great if you don’t want to worry about the file and everything syncs on its own. (There is a self hosted version, if you prefer).

    Avoid anything paid or tied to a major corporation, they have proven time and again they cn not be trusted to keep our data safe.







  • No the government should not stay out of it.

    How does this make any sense “if you, or anyone you know, has ever bought our taxi, you can not sue when our driver hits you”?

    “Buyer beware” is not an argument when this shit is buried in pages of dence leagle documents or in some case never presented to the end user (in the case of a things like appliance delivery, where the buyer never sees the documents included). Do you expect me to hire a lawyer to buy a washer machine, or to sign up for a free Disney+ trail? Speaking of Disney, how about that “allergy friendly” restuant that killed someone with allergies. Theae forced arbitration clauses are letting companies people get away with wrongful deaths. [https://www.law.cornell.edu/wex/implied_warranty_of_merchantability](implied warranty of merchantability). If the restaurant says their food does not contain an ingredient and they say the food prep is craefully done to ensure no cords contamination and someone dies because the ingredient was in the food - there’s a problem and justice needs to be upheld.

    Being a rebublicans or wanting “small goverment” has nothing to do with this. Yes too much gov intervention is bad, but with out it we’d still be eating rats in our hamburgers.

    Don’t bring abritarty sides into a problem when people are dying and no one is getting held accountable.


  • So there will be at least a partial refund right? Of course not.

    This is like selling someone a birthday cake and after they have a few slices you scrape of the remaining frosting and suck out the moisture.

    IMO juicebox should be responsible for 25-50% refunds for taking away the web features, depending on how much more it cost than similar products without the features. The charger it self still work, so I don’t think a 100% refund should be required.

    Alternatively, they can (preferably) release the software under an open source license or sell the service to another company who is forced to match whatever the subscription cost is for at least 7 years.

    Edit: I just read a comment on the article, I take back what I said, 100% refund + plus cost for an elecrrition to rip this shit out peoples homes.

    your charger can potentially deliver more power than the branch circuit to which it is attached (i.e. if you have a 48 amp charger on a 40 amp circuit) you need to use the software to derate the charger so that it limits charging to an amount valid for your circuit.

    That should not be a software switch…