• 0 Posts
  • 260 Comments
Joined 1 year ago
cake
Cake day: June 30th, 2023

help-circle
  • KeePassXC you would put the sync-file itself into syncthing or something, and then KPXC would resolve changes between the sync file back to the main vault. I don’t use this method directly so I might be incorrect on the details, but it is possible to setup in a device to device manner.

    You keep saying external server for syncthing, but again: syncthing does direct data transfers, encrypted end to end, between devices. It does not use cloud hosting or servers. It has the equivalent of a 90s FPS matchmaking lobby, so you can find your own devices latest IP.

    You register the devices with each other with their generated ID codes. Then you ask the matchmaking server when it last saw that alias. It gives you the last IP that checked in with that unique alias. It then contacts that OP, and performs a handshake. If it passes, your two devices can now sync directly. The matchmaking relay has 0 data of yours, and 0 ability to associate your unique ID with a name, hardware, or anything other than a last seen IP. When on the same LAN, devices don’t even query the matchmaking relay if you don’t want. It’s totally offline.

    If you elect to, you can allow relays to let you tunnel of you have NAT issues, and your end to end encrypted data can be synced through a relay. In those cases then yes, you are extending a bare minimum trust, and you fully encrypted data would temporarily pass on the relay’s RAM. If this makes you paranoid, you can easily add a password to the sync folder itself, encrypting it unless another user inputs the password on the other end. Adding another layer if you wanted.

    I just get nothing from Bitwarden that syncthing and KeePass don’t offer more easily. Syncthing works for tons of devices and other purposes as well, preventing to host a password sharing only tool, and just letting you use a direvy device to device sync tool. I don’t know how or why you would have vault conflicts, but it really does sound like something fixable. Running this for years and I’ve never run into it.


  • This is one of the rare cases where I believe security through obscurity applies.

    What is the most ripe attack target: the password hosting service with millions of user credentials, or literally some random IP address using syncthing that could be sending literally anything that you don’t know is passwords or porn.

    Companies like Bitwarden and 1Password and LastPass are doomed to have failures, just like any major corporation. They are too big with too much attack surface, and clearly advertise that they have stuff worth stealing.

    Me? My KeePass vault is synced via Syncthing with no relay data, so it only ever exists on my phone and desktop, and is encrypted with what is today functionally unbreakable encryption. Today at least (RIP when quantum chips get good).

    And my data is a blade of grass in a field. Sure there is a narrow chance someone snooping on my entire geographic area and stealing packets like the FBI could grab some packets in transmission. But they show nothing, and mean nothing. And the FBI has easier ways to get our data anyways.

    Point is, I’d rather take my odds as a heavily encrypted file syncs between singular devices like a drop of water in the ocean, versus putting all my diamonds in Joe’s Diamond Emporium and just hoping no one decides to steal MY diamonds when it (inevitably) gets robbed.


  • In this circumstance, you can turn on simple versioning for the password vault. It will keep both vault copies and you can merge your changes together manually in the event this happens, no loss of data.

    For mobile I just give syncthing full permission to run in the background and have never had issues with the syncing on the folders I designate. Not saying it doesn’t happen, but I believe this can be solved.

    However KeePassXC’s sync feature does sync the vault.

    Syncthing does not have a server. The relay only serves to match your current client (device A) with the IP of your other client (device B). Nothing else passes through it unless you opt into using relaying in case you have NAT issues.

    If you are paranoid, the software is open source and you can host your own relays privately, but again, it is similar to a matchmaking service, not data transfer.

    Syncthing is a direct device to device transfer. No server in the middle unless you want it.

    https://docs.syncthing.net/users/relaying.html


  • This still requires a server setup, focused entirely on passwords. Why do that?

    Why not just use KeePass or KeePassXC, and use Syncthing for this and general files, or KeePassXC’s keeshare sync to sync the files without any hosting, server, or other services.

    Extremely simplified tldr: both of these are like a authenticated private bittorrent, where the “tracker” only helps you find yourself on another devices, no data is ever sent outside of your authenticaed devices, and all transmissions are encrypted as well.





  • Then cut 4k content entirely. Downgrade to 720p.

    Do what must be done. Run the company like it was intended to be financially feasible without some future advertising innovation saving it.

    But once the product itself begins to actively repulse me, then I stop checking the website as much. Literally everyone I know right now in my immediate family and friend circle is looking or testing a Google alternative because of these reasons.

    When you enshittify the experience too much, no one wants it. I have YT premium, but parents who have YT TV due to poor coverage in their area, they don’t get YT premium. I don’t understand that.

    There is a give and take with advertising, you are right. But this is just beyond what I will tolerate. Pause screen ads and ads on my TV home screen are my line. That is my hardware, and that is a service I pay for. Absolutely not.





  • If you’re in prison for life, and you want to kill yourself because of gender dysphoria, providing you the medical care to avoid that is the humane thing to do. Period.

    If you are an immigrant detained for 6-12 months before deportation, the the odds of this applying to detained immigrants is near 0, but let’s say 1% it does, this would be tailored at ensuring they can have the drugs they require.

    Keeping people from shooting out the back of their fucking heads or swallowing a bottle of painkillers to end it all is always the humane choice.

    Don’t worry, we could fund it all by just not administering a few death penalties (those are more expensive than life imprisonment).






  • I think LTT did a video on this recently actually.

    The truth is there are some inflection points, but your chosen gaming resolution is going to affect things the most. If you are playing in 1080p, then you are leaving true performance on the table to not upgrade the rest. But if you are gaming at 4k, the GPU carries 95% of the biggest burden, so you are seeing only 5-10% improvements from changing your whole damn motherboard and cpu.

    As time goes on this will change. But especially since 4k high end gaming is so intensive, the gains on cpu aren’t massive. 1440p you get some moderate improvements from cpu / memory, etc, but 1080p is where you can see huge uplift.




  • Dunno what to tell you, I have literally done this dozens of times this year alone, and plenty of years prior. I have seen the screen readouts, and again, the turnstile readout is seat and name. They can pull your group on the PC screen or a handheld scanner if they want, but most don’t or won’t. If you were trying to board first they might. Hence why I said second main boarding group, every time.

    man up and pay for a premium ticket

    With the way you are talking you seem to not understand how premium boarding works. Nothing about boarding groups is remotely about boarding efficiently. Literally not one bit of it. 0%. It is 100% point loyalty and status. They do not board back to front, nor do they board in staggered patterns to spread traffic, they board from front to back, starting with the higher status and going down. Zones are assigned again based on status of the flyer and seat position. You can be in Zone 1 while in sest 35F if you are right status and sometimes still get pushed to Zone 4 or 5 when sitting in Premium/comfort+.

    What I’m doing actually is less traffic overall. I specifically choose a seat in the rear of the plane for this reason. Zone two boards in front midsection. Again, boarding groups are not efficient, go watch a whole CGP Grey video on that if you don’t believe me, he talks about it for 20 minutes. But I’m getting situated, stowing my things, clearing aisle obstacles, and ready by the time anyone else gets to the rear, and all I have to do is let them in, which is considerably faster than the traffic jam that zone boarding causes from all passengers being in the same area at once. Everything I do happens simultaneously while the rest of the front midsection is a natural traffic disaster because everyone in one section is boarding at once. It is as inefficient as possible, and I’m playing no part in extending it. I don’t even stand in their section I blast straight through it to the back, where there is no one.

    Efficient boarding, without a literal line order, would be something like waves going from back to front staggered every third or 4th row. Zone 1A, 1B, 1C, etc. No airline does this. Because they want to sell you faster boarding. I’ve been on the highest status tiers at various times on 3 of the airlines, and again, nothing is different they just seat you first because your loyalty points regardless of position in the plane.

    I’ve flown millions of miles at this point across the 5 major airlines in the US (sadly still a few hundred thousand short on Delta because it’s not consolidated), and spent more than I care to think about for work travel. They will kick you back down to Zone 7 without a second thought, and none of it has to do with efficiency. And none of what I’ve said above slows anyone down. You’re buying into marketing schlock.