• 0 Posts
  • 62 Comments
Joined 1 year ago
cake
Cake day: October 9th, 2023

help-circle



  • i know you said no pixel, however … Pixel + GrapheneOS works great and easy to install.

    GrapheneOS takes the google spyware out of pixel. However, it does add a slightly steeper learning curve to Android. Not too bad, just a few more options to poke at.

    It doesn’t cut you off from the google play store, instead sandboxing it preventing from accessing data outside its own service. This is important if you need specific apps for work, bank, etc.

    For open-source apps F-Droid app store is your friend.

    Unfortunately, GrapheneOS only works for pixel. There are other options you could look into such as LinageOS, but those goes beyond my personal knowlage. Specifically you want a phone that allows you unlock the bootloader.

    Avoid Samsung like the plague.

    Any version of Android that comes pre-installed is going to have Google Spyware and bloat. Manufactures, especially Samsung, spin up their own version of Android so then you have both Googles bloat and Samsung bloat.



  • You’re trusting a third party to store, protect and not loose your passwords behind a vault you never see.

    Google had messed up pretty bad a few months ago. Last pass has had issues. I’m unaware of 1pass having issues, but I don’t exactly pay close attentions. https://www.keepersecurity.com/blog/2024/08/01/google-password-manager-loses-millions-of-passwords/

    These days its not if something bad happens, its when and how bad.

    Keeping your database private, also reduces the risk of random attacks a lot. If you’re passwords aren’t part of a big data leak, they can’t use them. Hackers are after the big payouts or the easy payouts. They’re less likely to spend a lot time trying to crack your one database, when they can move on to the next guy who keeps them all in a word doc.


    If you do have reason to keep using 1pass for whatever reason, be it convince or lack of time to switch, I highly recommend at least getting your important (email, bank, etc) passwords duplicated to something like Keepass (back that file up too) so if/when 1pass ever looses your passwords, you at least have a solid starting point for recovery. Its also good way to familiarize/try out a few options with out dedicating to a full switch.


  • Friendly reminder: If you haven’t diversified your passwords yet, get a password manger and do it!

    Its not an if someone gets hacks, its when.

    I don’t know if this hack included any user and password, but if it did, they will try the combo on other sites.


    KeePassXC, works great but you are responsible for your own file and syncing it between devices. (I use syncthing, but a cloud drive is a viable sync method, its all encyptyed) (iOS options limited)

    Bitwarden, great if you don’t want to worry about the file and everything syncs on its own. (There is a self hosted version, if you prefer).

    Avoid anything paid or tied to a major corporation, they have proven time and again they cn not be trusted to keep our data safe.








  • You’d expect some sort of privacy in bathrooms

    That is the whole point of this mess. The alternative is a person or camera INSIDE the bathroom at all times. The camera would be so much cheaper to deploy…but privavcy laws, rightfully, say no.

    With the sensor all it does is say “smoke/vape detected”, from there an adult can check the hall cam to see who went in or just go right in to catch the kid.

    I assume with the monitor, it makes it easy for a teacher sitting outside the bathroom and can see the popup (in some schools they already have them to check passes and listen for screeming)



  • I was talking about the individual card limits that can be set, those definatly work.

    Edit, looking my account, I too have 250daily and 1000 monthy limit. The next paragraph might be be outdated?

    I know the total daily limit is “adaptive” or something set based on your spending habits. I’d prefer setting the limit myself, but it is what it is.


    1. Ultimitaly its up to the user to remember the master password. I’m not familiar with how bitwarden works, but do use keepssXC. I hear bitwarden is better for less techical people due to having built in account/sync options. (You can also self-host BW if you want)

    Keepass is file based, it is up to you to backup the file, for most users putting it an auto-synced cloud drive folder is their best bet. It’s automatic, multi-platform and offsite. Many technical users use sync thing (or equivalent) to manage the file across multiple backup locations.

    KeePassXC is essentially a GUI for KeePass datbase, like word and openoffice can both open a .doc file, multiple programs can open a keepass file. If KeePassXC dies, theres others options for opening the file.

    That being said, IOS options suck, theres one called Strongbox that is, in my opinion, the best. Its not FOSS like the others. Free version works 100% no problems, but they ask a high $20/yr sub or $90 lifetime for a handful of nonessential features (I’d love an decent alternative if anyone has one).

    For Android I like KeepassDX and Keepass2Android.


    1. Getting hacked is a legitimate concern. However the greatest risk is still duplicate passwords. The time it will take crack an individual database is going to be less well spent than dumping a million username/password sets into a thousand sites and hoping for a match.

    Realistically, if you’re the specific target of a hacker going specificaly after your database files you’re best off freezing your credit and bank accounts.

    If your database gets hacked, there are a few ways you can midigate the damge, its up to an individual to balance convince and security.

    First is 2fa. Keepass works great for TOTP 2fa, with browser integrations, its a breeze signing into sites. If you want more security, you would have a seperate database file with a different master password for 2fa. Now a hacker needs to crack 2 databases.

    Another way to midigate the risk is to seperate whatever emails you use from the main bunch, this way if the main databse gets compromised, you won’t lose the emails that let you reset everything else. If the email gets cracked, they won’t have a convient list of accounts to go mess with. Also make sure the emails have all the security and recovery options available setup.


    3, bonus round Finally for fincial security, don’t have your credit card saved on every site. I don’t let most of them store it all and use privacy.com for pretty much every thing these days. Set transaction limits on regularly used sites, and set up a “1-time use” card for anythibg irregular.

    Even if some brakes into, for example my amazon account, they are going to find a $100 purchase won’t work. I’ll get an email and can just cancel the privacy card for amazon (I’d probably kill them all to be safe) and then work on resecuring everything.

    To top it off Privacy.com it self has a dedicated credit card attached with a strict limit to midigate damge.