10-50 people normal use case?
For KeePass no, for VaultWarden yes.
Just got triggered for the comment above suggesting a solution that doesn't work for quite a lot of deployments/users, but yes, my comment was a little bit out of place as for single user deployments KeePass is probably way simpler/better.
Totally agreed, but there are pros and cons.
File - harder to steal but once stolen hacker can bruteforce it as much as it wants. Web service - with proper rate limits (and additional IP whitelist so you can only sync on VPN/local network) - its harder to bruteforce. (But yes, you (sometimes) have also full copy locally in the local client, but ...)
If it was only for me I probably would also go with KeePass as you will not update the same db at the same time, but with with multiple users it's getting unmanageable.
I just got triggered as those CVEs are not that bad due to the nature that the app encrypts stuff on the client side so web server is more like shared file storage, while your answer suggested to switch to a solution that doesn't work for a lot of people (as we already tried that).
Explain how can you use KeePass+Syncthing with 10-50 people (possibly different groups for different passwords) having different sets of access level while maintaining sane ease of use?
The passwords are encrypted in the first place so the security for them is only on the client side.
They only need to serve ads related to the conent. Because that is most likely something im interested in as I'm visiting the page for that. They don't need any permissions/cookies for that.
Opening in incognito doesnt give you any privacy, they still going to match you using IP and browser fingerprint to get (almost) the same person matching as allowing all cookies.
Cookies just makes it easier.
For me if its a page I opened first time I will just close it and open next search result.
If this page/domain is something I see quite often then depending on the price I might pay.
Paying full monthly price for single page visit is stupid they will have a hard time to convince me to pay. And paying with privacy is out for me.
Waiting for time when they start using centralized payment system that will allow me to pay small amount per visit, like lightning or BAT.
I call those estimates BS like always, but who knows.
Maybe they should focus on giving people a way to access those legally? Where on that poster campain say where to go? And secondly... They as always still introduce the BS regional locking!
Yes, but you as a user are in control of when/how you update, you can first update some test server and only then propagate it to other.
But still better have single (hopefully secure) risk point/target that you need to pay attention than have multiple god know when/how updating that you dont even dont know about.
One more reason to have centralized and secure way to do app updates like in Linux (yes, you could still get f for example with not signed app images and such, but less likely)
Not allowing every single app maker make their own update center is the way to go.
(No internet =} no download = no failure
You can even host repo mirror locally, that will still work without internet ;)
How to have internet without power?
Very cool project, as you can host your own stream on your own terms while publish to open/global directory and also integrates with Fediverse <3
I move unsubscribed emails to different folder, so next time they send me email I don't feel bad in any way as I can confirm that I did tell them not to send me emails.
I only regret I can't flag it as spam double time.
Not true, I'm just fighting the myth that incognito mode gives you (any) privacy.
Company have many legal reasons to store my IP and they do so, don't have a problem with it, but they can't use it legally for advertising without consent. You are agreeing to tracking, that in turn allow them to use your IP for tracking, it doesnt matter if its in incognito mode as now they can track you legally also outside. So your comment about using incognito is just plain wrong.
Ultimatily it's about the rules (including gdpr), I don't agree/approve to be tracked and don't want my visit to be linked to me, so if the website like that don't want to provide content in exchange for ads (like in the OP case above) then they don't need to.
I fully know they can (and probably doing it without asking because they can) track my activity to serve targeted ads. I just voice my disgust and voice my disapproval with the state the advertising is now, and propose a solution that I personally am fine with it.
Why do you think I'm using adblock and pi-hole for?