Estudante de Engenharia Informática apaixonado pela área; algures em Portugal.

Administrador da instância lemmy.pt.


Computer Science student, passionate about the field; somewhere in Portugal.

lemmy.pt instance administrator.


https://tmpod.dev/

  • 3 Posts
  • 56 Comments
Joined 4 years ago
cake
Cake day: September 10th, 2021

help-circle



  • You’re correct, but that’s like saying along the lines of manufacturing a car is just bolting and soldering a bunch of stuff. It’s technically true to some degree, but it’s very disingenuous to make such a statement without being ironic. If you’re making these claims, you’re either incompetent or acting in bad faith.

    I think there is a lot wrong with LLMs and how the public at large uses them, and even more so with how companies are developing and promoting them. But to spread misinformation and polute an already overcrowded space with junk is irresponsible at best.





  • This. And to add to what other commenters have said, by using Bitwarden and paying for their Premium plan (very cheap, just $10/year), even if you don’t use all their features, you’re supporting a good project. It’s critical infrastructure, I think the price is more than fair.
    Either way, you should always make periodic backups from any cloud service you use, encrypted of course.


  • This would be really neat, however it’s not trivial to sell those everywhere. If you’re lucky to live in a country or even city where they can get those to, you’re golden. If you don’t, you’re screwed.

    Unfortunately, as much as I love the idea and tech behind Monero, actually accepting it is not practical at all, as the coin is used a lot for criminal stuff and is thus very strictly followed by many agencies. We don’t know if they can break it, but even they don’t, businesses can get a rough treatment just for accepting Monero. It’s perfectly understandable if they’d rather not do it.




  • This is quite misleading and frankly low effort. Besides the readability issues, the chart makes a clear distinction between Proton Pass and Bitwarden when it comes to privacy, citing their privacy policy.

    As it happens, however, Proton’s server code is closed, unaudited[1] and not distributed, and the apps (web, Android and iOS) do not support setting different homeservers. This effectively means you cannot self-host your password manager and must be “locked” to Proton for what I consider to be one of the most fundamental and important pieces of technology a person can use.

    Bitwarden, however, has opened their official C# server, their internal Rust SDK and the apps themselves too. Furthermore, they have several guides on how to self-host your own personal server, and have implemented settings in their apps to change the homeserver. There’s even an unofficial server, vaultwarden that is even better tailored for small, personal deployments.

    All this to say: the fact they may collect some usage data on their website is very insignificant for their offering, in my opinion. The real value is in providing a secure vault that only the user can manage. If you need better privacy and/or anonymity, you should use tools specialized for that anyway, instead of blindly trusting a third-party’s Privacy Policy, no matter who they are. But then again, it’s the old game of threat models.

    Ultimately, Bitwarden inspires more confidence than Proton, by giving those you can and want the ability to truly own their secrets.


    1. As far as I’m aware, there’s only this audit by Cure53, in which they performed a white-box pen test on the API, with only its documentation provided, no code whatsoever. These audits are important from a cybersecurity point of view, but security is not the same as privacy and should not be taken as such. ↩︎


  • tmpod@lemmy.ptMtoPrivacy@lemmy.mlPrivate videoconferencing ?
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 months ago

    Adding onto what’s already on the thread, you can try look at the newer Element Call, which is an implementation of Matrix’s native calls.
    I’ve been using it a bit recently, since Jitsi seems to have stopped working reliably for me (to be frank, I’ve not put much effort into debugging it yet). It works well, but it’s still early stage, lacking some features Jitsi has. If that one works for you, I recommend you stick to it.





  • That’s why I love virtual card systems like MB NET. You just generate a random virtual card for every purchase (or a recurring one for each subscription vendor, for example) and move on. Your bank still knows what you’re doing, of course, but vendors can’t correlate anything. Preventing your bank from knowing where you’re spending your money is much harder, for very practical reasons: fraud detection. The only real way is to use a secure crypto coin like Monero, but very few places accept it and you still have to deal with volatility.



  • tmpod@lemmy.pttoSelfhosted@lemmy.worldConfused about Podman
    link
    fedilink
    English
    arrow-up
    3
    ·
    11 months ago

    This is a good suggestion. Docker is more mature and has more resources, so it’s better to learn the ins and outs of containers. After getting comfortable with it, you can move to Podman and have a much better time tackling its peculiarities regarding permissions and rootless.

    I used Docker for years and only recently decided to give Podman a try, porting my Lemmy instance to it.