Conversation

Notices

1. Embed this notice
   feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:08:08 JST feld
   Alright, I'm officially dissatisfied with Bitwarden. Again it failed me. On a plane, wouldn't show me my vault contents because it couldn't reach my server. The inability of this software to be local-first is maddening.
   
   Keepass sucks because of the syncing problem. All the options suck for different reasons: Dropbox, iCloud, nextcloud/owncloud (way too bulky to self-host), SFTP, WebDAV...
   
   I have a new idea. Why the hell isn't there a Keepass client that uses IMAP as the storage? It's not locked in to anything, it's lightweight, it can sync, you don't need a complicated account password because your encrypted database file will be well secured. All you need is a way to track revisions so you can deal with conflicts and that could potentially be encoded as a custom mail header, right?
   • kaia likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:09:49 JST Fish of Rage

     in reply to
     @feld keepass2 on windows can use WebDAV, you just give it a WebDAV URL.
     kaia likes this.
   • Embed this notice
     kaia (kaia@brotka.st)'s status on Friday, 04-Oct-2024 23:15:49 JST kaia

     in reply to
     @feld using keepassxc and syncthing. it always worked, never lost anything, but very occasionally when I make changes on both sides, there's a conflicting file I have to merge.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:16:48 JST feld

     in reply to

     • kaia
     @kaia I can't use syncthing for this on my iPhone
     kaia likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:22:46 JST feld

     in reply to

     • Fish of Rage
     @sun So you're basically stuck with IIS or Apache for this. Nginx doesn't support all the verbs, Caddy's is unofficial and very new so not sure I'd trust it. Then you have to implement some auth on it.
     
     It feels like a lot of effort vs being able to use any IMAP account anywhere
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:24:14 JST feld

     in reply to

     • skylar :confederateflag:??? :z:
     @skylar Why would I want to run a giant mess of PHP and entire OS (it would be a VM or at least a massive container) just for one little feature.
     
     vs software I could run that uses like 10MB of RAM lol
   • Embed this notice
     skylar :confederateflag:??? :z: (skylar@misskey.yandere.love)'s status on Friday, 04-Oct-2024 23:24:16 JST skylar :confederateflag:??? :z:

     in reply to
     @feld >nextcloud
     >too bulky to self-host
     ??????
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:25:26 JST feld

     in reply to

     • kaia
     @kaia I also want nice browser extension and iOS integration with the password manager thing. I'll go crazy if always have to open another app
     kaia likes this.
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:28:11 JST cool_boy_mew

     in reply to
     @feld I don't understand the keepass problem. Do you still make accounts on the daily? Do you have 10 computers?
     
     I have one main computer where I make sure to make the accounts on, then I transfer the file to my side computer once in a while, this also doubles as backups
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:28:11 JST feld

     in reply to

     • cool_boy_mew
     @coolboymew > make accounts daily
     
     Yes, all the time, for personal and work.
     
     > 10 computers
     
     At least 2 computers and a phone, sometimes an iPad. I want it to be always synced all the time
     
     I also want to be able to share specific passwords (banks, utilities, insurance, etc) with my wife which I can do with an Organization in Bitwarden so she always gets the latest passwords.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:32:09 JST Fish of Rage

     in reply to
     @feld I found some super tiny webdav servers that could be reverse proxied but they're all PHP shit
     feld likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:33:26 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @feld @coolboymew my keepass2 file has 160 passwords
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:34:53 JST feld

     in reply to

     • cool_boy_mew
     @coolboymew I couldn't even access my American Airlines account while was on the plane so I could buy wifi access.
     
     Plus my TOTP codes.
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:34:54 JST cool_boy_mew

     in reply to
     @feld I saw iPhone and iPad and this is where I get bewildered
     
     Do you seriously need 99.9% of these accounts on the iPad and iPhone? Why aren't they logged in already? In case you need them that badly, why don't you actually have a side computer with you right now? Can't it wait 2-3 hours until you get home?
     
     I can't understand needing these accesses that badly of these devices
     
     As for the work stuff, it stays on the work computer
     
     As for sharing some passwords with your wife, that's another story. It would be better if she had her own vaults
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:46:41 JST feld

     in reply to

     • skylar :confederateflag:??? :z:
     @skylar it's another massive app to manage and update and secure. Or a whole VM. I'll pass. I have the hardware, it's not a problem. It's the principal. The bloat is not worth it
   • Embed this notice
     skylar :confederateflag:??? :z: (skylar@misskey.yandere.love)'s status on Friday, 04-Oct-2024 23:46:42 JST skylar :confederateflag:??? :z:

     in reply to
     @feld we're living in the age of the hypervisor and both RAM and NVMe storage being so cheap that a few gigs of each is basically free
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:50:02 JST feld

     in reply to

     • cool_boy_mew
     • Fish of Rage
     @sun @coolboymew so Keepassium looks like a decent implementation it's just missing import but I could do it with another app and then copy over the database file. Has plenty of features, all the iOS / Mac integrations...
     
     I might bite the bullet and spin up an Apache with mod_dav and mod_ldap next week *sigh*
     
     I'd pay for the $70 lifetime license without hesitation
     
     https://keepassium.com
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:53:47 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @feld @coolboymew I use keepassium on my phone but I keep my file on a usb-c stick which I put into the phone or my laptop
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:54:30 JST cool_boy_mew

     in reply to

     • Fish of Rage
     @sun @feld I probably have more lol
     Fish of Rage likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:55:00 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @coolboymew @feld that's impressive
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:55:14 JST feld

     in reply to

     • cool_boy_mew
     • Fish of Rage
     @sun @coolboymew Those are rookie numbers lol this isn't even everything
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:55:37 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @feld @coolboymew I use a separate keyring for work passwords.
     feld likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:55:44 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @coolboymew @feld mine goes back to 2010
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:55:45 JST cool_boy_mew

     in reply to

     • Fish of Rage
     @sun @feld I probably have like 20 years of accounts in these
     Fish of Rage likes this.
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:56:45 JST cool_boy_mew

     in reply to
     @feld I generally try to have this kinda stuff logged in beforehand
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:56:45 JST feld

     in reply to

     • cool_boy_mew
     @coolboymew Not possible for this, plus more and more sites are moving to shorter life cookies / tokens anyway which is a good thing
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 04-Oct-2024 23:57:26 JST feld

     in reply to

     • cool_boy_mew
     • Fish of Rage
     @sun @coolboymew Yeah same
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Friday, 04-Oct-2024 23:58:02 JST cool_boy_mew

     in reply to
     @feld Then I try to have everything ready beforehand, or have a laptop on hand
     
     I'm seriously not using my phone for any of that crap
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:58:02 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @coolboymew @feld tiny usbc stick works every time
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Friday, 04-Oct-2024 23:59:51 JST Fish of Rage

     in reply to

     • cool_boy_mew
     @feld @coolboymew why you have like 3x the number of passwords than me then
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 05-Oct-2024 00:01:44 JST feld

     in reply to

     • cool_boy_mew
     @coolboymew I'm not gonna carry a laptop everywhere just for that. There is, contrary to popular belief, life away from a full size keyboard. 🙃
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 05-Oct-2024 00:02:50 JST feld

     in reply to

     • cool_boy_mew
     • Fish of Rage
     @sun @coolboymew A lot of sites over a lot of years. I also refuse to use any SSO shit like "sign in with GitHub" or whatever. Always a dedicated account. Then it never breaks.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 05-Oct-2024 00:03:54 JST feld

     in reply to

     • cool_boy_mew
     @coolboymew And if I need to get into bank / credit card / cell phone / insurance while I'm 2000 miles away?
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Saturday, 05-Oct-2024 00:03:55 JST cool_boy_mew

     in reply to
     @feld If there's a life away from the keyboard, there's a life away from the hundreds of accounts
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 05-Oct-2024 00:10:20 JST feld

     in reply to

     • Mitch Conner
     @mitchconner My mom, an actual boomer, used password managers before it was cool. She had a gigantic collection of passwords in Roboforms back in 1999
   • Embed this notice
     Mitch Conner (mitchconner@clubcyberia.co)'s status on Saturday, 05-Oct-2024 00:10:21 JST Mitch Conner

     in reply to

     • cool_boy_mew
     I hope you realize what a boomer you sound like in this thread. Many people use password managers.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 05-Oct-2024 00:17:17 JST feld

     in reply to

     • Mitch Conner
     • cool_boy_mew
     @coolboymew @mitchconner Some of us are not allergic to phones and use them all the time, even to make new accounts. We also do not live in our parents basements with a stained mattress and a computer desk from 1997.
     
     We even have wives that we need to keep lots of important accounts in sync with, especially because these dickheads force password changes all the time. And they need to be able to access these accounts from anywhere on the planet at any time in case something happens to us.
     
     Also some of us do not desire to bring an entire desktop/laptop computer on trips. We want to get away from computers and touch grass for a while but also not get stranded thousands of miles away because a bank account or credit card is locked and we can't get the passwords and codes we need to convince the support people who we are.
     
     If you live an extremely sheltered, lonely life it is easy to recommend such solutions because you have no responsibilities to anyone or care what happens to them if you die.
     
     Being a functioning adult is complicated.
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Saturday, 05-Oct-2024 00:17:18 JST cool_boy_mew

     in reply to

     • Mitch Conner
     @mitchconner @feld when did I say I didn't? I just refuse to bring that stuff with me on the phone and having to juggle vaults around
     
     All in all, there's no reasons to have it synced on your phone all the times. Do you make new accounts on your phone? Especially away from a computer in reach where you will need it saved into the vault immediately and the vault synced back everywhere else? What? That's weird bro
     
     Do you make accounts all the times that you suddenly need to have access to in your phone at all times? What? That's weird bro
     
     The phone is a toy and I'm treating it according it. If I'm away from the keyboard, I'm away from the keyboard
     
     If I really needed an account while away, I plan accordingly... If not, then it WILL wait