• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: July 30th, 2023

help-circle
  • Just something to keep in mind for those not in the security space. When a security company does an audit, its generally a checklist of commercial and custom security software along with a couple people poking around looking for more manual harder to find stuff. But there’s a reason companies like Mullvad have a bug bounty program… Just because cure53 didn’t find it, it doesn’t mean some bored hacker won’t…

    Absolutely better than nothing though.





  • It’s impossible to avoid bias completely. It’s very much possible to recognize your bias and train yourself to have emotional detachment from a given subject. Ask a Buddhist monk, or a seasoned intelligence analyst.

    Philosophical ramble below, you can stop reading here if you’re not in the mood.

    Most people unfortunately never get to the stage of realizing they can detach themselves from emotional bias, so they read and believe whatever they have already read and believe and want to be true.

    Side note: it’s much easier when you’re on the spectrum, or learned as a child to shut your emotions off (I’m not sure this can be learned in adulthood). It seems like many victims of childhood abuse take it in the other direction - emotional overreaction.










  • Unless you’re making more than $16 each month (most are not making anywhere close to that) from Medium then you’re just choosing another company to profit off of you. It’s also more work and takes a lot (arguably, depending on your technical comfort level) more time because again… most people have nothing of much value to say. If you’re an expert on your field or a great marketer, sure maybe you can make that $16 back and then some. Most can not. You’ll know if you can, and you can look at your medium analytics and judge that and then do the Wix thing because…

    Do you own the content that you publish on Medium?

    Yes. Everything you publish on Medium, that is rightfully yours, belongs to you and you can republish, delete or choose to convert it into other forms without worrying about anything because Medium gives you the ownership. They have clearly explained this in the Medium terms of service.

    Medium (company) might use your content to redistribute, translate or modify, and they need your permission for this. They need licensing for this because of the Medium rule; “You own your content”

    Medium is like an ocean in part because it’s so easy and free. There are some really spectacular fish and animals and rare finds and even shipwrecks full of gold and treasure. There is also a metric shit-ton of mediocrity.

    A comparison could be made to YouTube or tiktok. Sure, you can make videos and upload them to your website and then share them. But there is immense value in the existing community in algorithm.


  • The thing about medium is that it’s a trusted domain + mailing list + blog + search engine in one. All you have to do is sign up and start writing, for free.

    Sure you can have your own domain, and spin up a cheap VPS which has WordPress or other blogging software, customize and setup the share buttons and theme and other plugins, pay MailChimp or another trusted relay to actually inbox your emails, use Google Analytics or some open source complex privacy-focused analytics, and then set up your advertisements or some scheme to contact you for article product placement if you actually want to make money from it. If you’re really good and knowledgeable in your field. That’s a lot of time invested and very expensive relatively (compared to free).

    I think a lot of people just want to share their knowledge, getting paid pennies for page views comes second to that.



  • In theory, if I were to use an online solution, bad actors wouldn’t be able to pull my vault from memory.

    It’s the same issue once you login to your vault via browser extension. They have to download your vault locally on login to decrypt it when you enter your password anyway*. Even if they don’t store your vault password in memory, they either store the entire vault (unlikely for size reasons) or a more temporary key to access the vault. Local compromise is full compromise already.

    *If they don’t, then they either made a giant technological leap, or they’re storing your passwords on a simple database on their servers and that’s not what you want from a password manager.


  • Synnr@sopuli.xyztoSelfhosted@lemmy.worldMy new favourite password manager
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    edit-2
    1 year ago

    Yup, I have been using KeePassXC locally since (one of) the first big LastPass breaches. I thought “password manager company… they know encryption” and then kept some of the most important things stored in my vault including notes of Bitcoin seedphrases etc. Thought "even if they get hacked, they wouldn’t let anyone exfil the huge amount of data from the USER VAULT SERVER… thought “my passphrase is like 25-30 chats long, nobody will crack that”…

    5 years after my last login and I find out the breach happened, user vaults were exfil’d, the encryption was absolute shit, and the notes weren’t even encrypted.

    I don’t trust cloud companies to keep promises or know what they’re doing today. and anything self-hosted isnt Internet accessable unless it’s on dedicated hardware subnetted off and wouldn’t matter if it got hacked.


  • Urim has been Israeli since the country came into existence.

    There’s so much propaganda from both sides that I don’t know what to believe about who, but Israel has only been a country since 1948 - that’s after the invention of the Jeep, microwave ovens, Frisbees, jet aircraft, etc.

    I’m not aware of the agreement made with Palestine for the land, but I’ve seen enough videos of Israelis near the border, both citizens and uniformed men, throwing Palestinians out of their houses so Israelis could live there. Not to mention the violent acts.