• 0 Posts
  • 14 Comments
Joined 2 years ago
cake
Cake day: June 24th, 2023

help-circle
  • Bazoogle@lemmy.worldtoPrivacy@lemmy.mlThe Privacy Iceberg
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    19 hours ago

    Bitwarden had some security issues historically.

    What security issues? If you mean potential security vulnerabilities researcher found that they’ve patched, I don’t understand how that would be different from Keepass and their previous security vulnerabilities. Bitwarden has never had a security issues historically that I know of. Lastpass, on the other hand…

    I generally recommend using software for password managers that isn’t internet connected.

    I also recommend they upload it to whatever cloud storage they use

    I also really don’t get these two. They seem to contradict each other.

    I usually recommend bitwarden, where they can use the browser extension and mobile phone app. It gives them autofill features on all their sites. Getting someone to change their passwords and use a password manager is already difficult enough. Giving them the most convenient option is going to make it more like they stick with it.


  • Being social is pretty similar to exercising. When you first try to do it after a while, it’s usually painful and not enjoyable. It isn’t until practicing and keeping at it that it will get easier and you can actually feel the benefits. Finding someone that you can actually share your hobbies with can go a long way, especially if they are able to give some sort of input as well that is beneficial to what you’re working on.



  • Yea, telegram being advertised as a privacy messenger is a joke. If people want to have group chats like in discord and don’t care about privacy, whatever. But to try and flaunt how privacy focused you are while using your own home-brewed encryption is a joke. Not to mention the fact you have to turn it on for every chat you want end to end encrypted.

    The whole thing about not giving out data is really only accomplished by spreading user data across several countries. So you would have to get a search warrant from every country to get the data, relying on some countries not wanting to cooperate with other countries. That is not real security. Real security would be encrypting it so you literally couldn’t give them the data, even if they had a search warrant. Ya know, like signal.


    1. A password managed is basically like a physical vault. If someone gets into a physical vault, they’ve gained access to all your valuable items, but the vault is extremely difficult to get into.
    2. Random websites do not prioritize security like they should. So when there is inevitably a breach in one of those 50 sites and you end up on haveibeenpwned.com, that does not allow them access to the other 49 sites. Often when logins are breached, the people getting that information do not care about the actual site that was breached. Rather, they know a password you use and your email, and can now try to login to actually useful sites where people often use the same login.
    3. There should be multiple layers of security to your password manager. Password and Authenticator app should be basic (No SMS or Email 2FA, not secure enough). Ideally, we move towards passwordless logins altogether so there is no secret that can be compromised on the server side.




  • This, to me, seems like the standardization vs optimization argument. So much of the tech world could be optimized like crazy, but the more complex it gets, the hard it is to communicate with others and keep things consistent. This complexity actually hinders production overall. Standardization, even if it’s not the most optimized, allows us to create vastly more complex and reliable systems because we can ensure we are all on the same page. Even if that standardization isn’t the best way to do it. I mean, if you want to talk about absolute control over your code, why don’t you write in assembly? Are all programming languages not virtually assembly with training wheels?

    Writing in code that is not memory safe is going to mean you are substantially more likely to have mistakes that lead both to user annoyance and straight up security vulnerabilities. Having applications written in a memory safe languages, especially when worked on by large swaths of people, is absolutely the best route. It provides a secure standard way to write memory safe code. This will reduce security vulnerabilities, decrease program crashes, and allow for more efficient developers.

    Changing a bike tire is something for a single person, maybe two at most. Writing code is often a team effort. And the more people that are involved, the more likely mistakes are going to happen. People absolutely can still learn the complexities, and still choose to use Rust because honestly, it’s the smart thing to do. And it doesn’t need to be rust. Any memory safe language would accomplish the same goal.


  • I listen to Steve Gibson’s podcast “Security Now” and he was talking about why, for security reasons, memory safe applications should be the way of the future. So many security vulnerabilities come from improper memory management. And while C may be more powerful, giving up some of that power for standardization is almost always worth it. We could make much more progress if we were spending less time trying to make sure the memory is handling correctly in every situation. So while there is no doubt the crazy fans of it, I think moving to memory safe languages in general should be the way of the future.

    Of course, he still writes all his programs in assembly and refuses to learn anything else. But when you’re at his age, I guess you get a pass XD


  • I find AI to be really good at this kind of stuff. If you give it as much detail as you can, including random tidbits, it can often find exactly what you’re looking for. I’ve done it a few times, and it’s always found it with, what I believe, was not very good information. If it doesn’t give it to you, just keep adding random pieces of information.

    What you’ve provided doesn’t quite seem like enough, because I tried it and didn’t get much luck. The best it came up with was The Silent Age. Try answering these questions:

    1. Was there narration
    2. Was the protagonist male or female
    3. How long ago did you play it? Like, was a game from 2 years ago too recent?
    4. Are you confident it was from the last 10 years, or did you just play it from the last 10 years?
    5. If it was point and click, were there normal animations? Like the character walking over to the thing you clicked?


  • It’s pretty damn close to being an absolute. As someone who has never been involved in an adulterous relationship in any form, I would never get with someone who has cheated. They have shown they are absolutely willing to violate an intimate partners trust, lie about it, and leave them (likely with little to no guilt). If they can do it once, they can, and likely will, do it again.

    Passionate love and Companionate love are two different things. And passionate love never lasts forever. If you’re with someone who is willing to cheat to find that passionate love, then when it dies with you, they are likely to go on to the next short term passionate love.

    If you want to make the argument that someone cheated in a relationship with an abusive partner, there are still substantial red flags there. Without showing how they’ve made great strides to be a different person (therapy, self improvement, etc) I can’t see them being a trustworthy long term partner. And there is no way someone could have made those improvements if they went from one partner immediately to the next.