Framapiaf

7 messages6 participants1 message aujourd’hui

Linux Is BestA list of Digital Service Providers outside the jurisdiction of the United States of America. <a href="https://codeberg.org/Linux-Is-Best/Outside_Us_Jurisdiction" rel="nofollow noopener noreferrer" target="_blank">https://codeberg.org/Linux-Is-Best/Outside_Us_Jurisdiction</a> This is a group project, so feel free to reach out if you have any suggestions, or learn any new information. <a href="https://mk.absturztau.be/tags/Vpn" rel="nofollow noopener noreferrer" target="_blank">#Vpn</a> <a href="https://mk.absturztau.be/tags/Email" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://mk.absturztau.be/tags/Dns" rel="nofollow noopener noreferrer" target="_blank">#Dns</a> <a href="https://mk.absturztau.be/tags/Domain" rel="nofollow noopener noreferrer" target="_blank">#Domain</a> <a href="https://mk.absturztau.be/tags/Messenger" rel="nofollow noopener noreferrer" target="_blank">#Messenger</a> <a href="https://mk.absturztau.be/tags/WebHosting" rel="nofollow noopener noreferrer" target="_blank">#WebHosting</a> <a href="https://mk.absturztau.be/tags/PasswordManager" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://mk.absturztau.be/tags/WebSearch" rel="nofollow noopener noreferrer" target="_blank">#WebSearch</a> <a href="https://mk.absturztau.be/tags/UsJurisdiction" rel="nofollow noopener noreferrer" target="_blank">#UsJurisdiction</a> <a href="https://mk.absturztau.be/tags/Project2025" rel="nofollow noopener noreferrer" target="_blank">#Project2025</a> <a href="https://mk.absturztau.be/tags/UnitedStates" rel="nofollow noopener noreferrer" target="_blank">#UnitedStates</a>

Andrii Kuznietsov🔐 <a href="https://social.kyiv.dcomm.net.ua/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> почала розгортати опцію «Видалити всі дані» у <a href="https://social.kyiv.dcomm.net.ua/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a>, яка дозволяє швидко видалити збережені паролі та ключі доступу.Нова функція поки доступна лише для пристроїв, на яких запущено бета-версії Google Play Services 25.10.31 та 25.09.60.Нова функція корисна під час переходу на інший менеджер паролів, а також у ситуаціях, коли треба автоматично видалити всі паролі після злому або втрати гаджета. <a href="https://highload.tech/uk/google-dozvolyt-vydalyaty-vsi-dani-z-password-manager/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://highload.tech/uk/google-dozvolyt-vydalyaty-vsi-dani-z-password-manager/</a>

NormJust had a weird moment where, as I was typing my password into my password manager, I almost hit Tab expecting it to autocomplete... 🤦 <a href="https://fosstodon.org/tags/Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Password</a> <a href="https://fosstodon.org/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://fosstodon.org/tags/Autocomplete" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Autocomplete</a> <a href="https://fosstodon.org/tags/Bash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bash</a>

LorenzoLearn how to set up and use NordPass to store and manage your passwords with this step-by-step guide.NordPass is a secure password manager for storing and auto-filling passwords. Learn how to set it up, save logins, and explore its features.<a href="https://poliverso.org/search?tag=nordpass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nordpass</a> <a href="https://poliverso.org/search?tag=passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a> <a href="https://www.techrepublic.com/article/how-to-use-nordpass/" rel="nofollow noopener noreferrer" target="_blank">How to Use NordPass: A Guide for Beginner’s</a>

Fossery Tech :debian: :gnome:FOSS NEWSFirefox 136 released with vertical tabs, official ARM64 Linux binaries, hardware video decoding for AMD GPUs on Linux, new HTTPS-First behavior for upgrading page loads to HTTPS, support for copying PNG images out of the browser etc.: <a href="https://9to5linux.com/mozilla-firefox-136-is-out-with-vertical-tabs-and-official-arm64-linux-binaries" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://9to5linux.com/mozilla-firefox-136-is-out-with-vertical-tabs-and-official-arm64-linux-binaries</a>Firefox 137 beta available with HEVC playback support on Linux, ability to identify all links in PDF documents and turn them into hyperlinks etc.: <a href="https://9to5linux.com/firefox-137-enters-public-beta-testing-with-hevc-playback-support-on-linux" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://9to5linux.com/firefox-137-enters-public-beta-testing-with-hevc-playback-support-on-linux</a>Thunderbird 136 released with dark mode toggle for messages, new Appearance setting to control message threading and sorting order globally, bug fixes and security patches: <a href="https://www.omgubuntu.co.uk/2025/03/thunderbird-136-release-adds-new-appearance-controls" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.omgubuntu.co.uk/2025/03/thunderbird-136-release-adds-new-appearance-controls</a>KeePassXC 2.7.10 released with support for importing passwords from Proton Pass (only unencrypted JSON files, no Passkeys currently), support for KeePass2 TOTP config settings, support for generating passphrases using a mix of uppercase and lowercase words ("MIXED case"), UI improvements etc.: <a href="https://9to5linux.com/keepassxc-2-7-10-open-source-password-manager-brings-proton-pass-support" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://9to5linux.com/keepassxc-2-7-10-open-source-password-manager-brings-proton-pass-support</a>/e/OS 2.8 released with LineageOS 21 base, privacy policy linked in account manager, App Lounge gets a refined warning message for manual updates and a more readable format for F-Droid app descriptions, software updates, bug fixes: <a href="https://alternativeto.net/news/2025/3/-e-os-2-8-released-with-improved-account-manager-smoother-app-lounge-and-bug-fixes/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://alternativeto.net/news/2025/3/-e-os-2-8-released-with-improved-account-manager-smoother-app-lounge-and-bug-fixes/</a>Internxt Drive becomes the first cloud storage with post-quantum encryption: <a href="https://news.itsfoss.com/internxt-drive-post-quantum-encryption/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://news.itsfoss.com/internxt-drive-post-quantum-encryption/</a>(Linux news in original post)<a href="https://social.linux.pizza/tags/WeeklyNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeeklyNews</a> <a href="https://social.linux.pizza/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.linux.pizza/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://social.linux.pizza/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://social.linux.pizza/tags/OpenSourceNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSourceNews</a> <a href="https://social.linux.pizza/tags/FOSSNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSSNews</a> <a href="https://social.linux.pizza/tags/Firefox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firefox</a> <a href="https://social.linux.pizza/tags/Mozilla" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mozilla</a> <a href="https://social.linux.pizza/tags/MozillaFirefox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MozillaFirefox</a> <a href="https://social.linux.pizza/tags/Firefox136" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firefox136</a> <a href="https://social.linux.pizza/tags/FirefoxBeta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FirefoxBeta</a> <a href="https://social.linux.pizza/tags/Thunderbird" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Thunderbird</a> <a href="https://social.linux.pizza/tags/Thunderbird136" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Thunderbird136</a> <a href="https://social.linux.pizza/tags/KeePassXC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeePassXC</a> <a href="https://social.linux.pizza/tags/eOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eOS</a> <a href="https://social.linux.pizza/tags/Internxt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Internxt</a> <a href="https://social.linux.pizza/tags/Browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Browser</a> <a href="https://social.linux.pizza/tags/WebBrowser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebBrowser</a> <a href="https://social.linux.pizza/tags/Email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://social.linux.pizza/tags/EmailClient" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EmailClient</a> <a href="https://social.linux.pizza/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://social.linux.pizza/tags/CustomRom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CustomRom</a> <a href="https://social.linux.pizza/tags/OperatingSystem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OperatingSystem</a> <a href="https://social.linux.pizza/tags/Cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloud</a> <a href="https://social.linux.pizza/tags/CloudProvider" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CloudProvider</a> <a href="https://social.linux.pizza/tags/CloudStorage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CloudStorage</a> <a href="https://social.linux.pizza/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.linux.pizza/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://social.linux.pizza/tags/FosseryTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FosseryTech</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/1Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1Password</a> offers geo-locating help for bad apps that constantly log you out<a href="https://arstechnica.com/gadgets/2025/03/1password-offers-geo-locating-help-for-bad-apps-that-constantly-log-you-out/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://arstechnica.com/gadgets/2025/03/1password-offers-geo-locating-help-for-bad-apps-that-constantly-log-you-out/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a>

The New OilMalicious <a href="https://mastodon.thenewoil.org/tags/Chrome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chrome</a> extensions can spoof password managers in new attack<a href="https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://mastodon.thenewoil.org/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a> <a href="https://mastodon.thenewoil.org/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

Notizie dal FediversoKeePass XC 2.7.10 introduce l’importazione da Proton PassKeePass XC si aggiorna alla versione 2.7.10 introducendo alcune novità tra cui la possibilità di importare le password da Proton Pass.<a href="https://www.lealternative.net/2025/03/07/keepass-xc-2-7-10-introduce-limportazione-da-proton-pass/" class="" rel="nofollow noopener noreferrer" target="_blank">https://www.lealternative.net/2025/03/07/keepass-xc-2-7-10-introduce-limportazione-da-proton-pass/</a>

Tx1Rx2Malicious Chrome extension can spoof password-managers...! <a href="https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/</a> Hope to get some statement from the big players on the market! (Proton will probably not answer, as they went away from fediverse) <a href="https://social.tchncs.de/tags/passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a> <a href="https://social.tchncs.de/tags/1password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1password</a> <a href="https://social.tchncs.de/tags/bitwarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bitwarden</a> <a href="https://social.tchncs.de/tags/protonpass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#protonpass</a> CC: <a href="https://1password.social/@1password" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@1password</a> / <a href="https://fosstodon.org/@bitwarden" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bitwarden</a> / <a href="https://mastodon.social/@protonprivacy" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@protonprivacy</a> / <a href="https://fosstodon.org/@keepassxc" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@keepassxc</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/KeePassXC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeePassXC</a> 2.7.10 released<a href="https://keepassxc.org/blog/2025-03-04-2.7.10-released/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keepassxc.org/blog/2025-03-04-2.7.10-released/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a> <a href="https://mastodon.thenewoil.org/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://mastodon.thenewoil.org/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a>

Grant_HQuestion for <a href="https://mastodon.social/tags/infoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infoSec</a> people:I need to recommend a <a href="https://mastodon.social/tags/passwordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordManager</a> to my high school teacher colleagues. Full spectrum of computer literacy, everyone needs to be able to use it. I'm a KeePass fan, with a manually configured sync - beyond 80% of them. What would you recommend?

LinuxiacKeePassXC 2.7.10 open-source password manager brings a Proton Pass importer, font size control, and more. <a href="https://linuxiac.com/keepassxc-2-7-10-brings-proton-pass-importer/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://linuxiac.com/keepassxc-2-7-10-brings-proton-pass-importer/</a> <a href="https://mastodon.social/tags/passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a>

CryptGoat<a href="https://fedifreu.de/tags/KeePassXC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeePassXC</a> 2.7.10 was released, including many bug fixes and enhancements such as <a href="https://fedifreu.de/tags/ProtonPass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProtonPass</a> import, changes to the password generator and adjustable font size. <a href="https://keepassxc.org/blog/2025-03-04-2.7.10-released/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keepassxc.org/blog/2025-03-04-2.7.10-released/</a><a href="https://fedifreu.de/tags/Passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passwords</a> <a href="https://fedifreu.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://fedifreu.de/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://fedifreu.de/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeSoftware</a> <a href="https://fedifreu.de/tags/passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a>

BluelupoKeePassXC 2.7.10 Open-Source Password Manager Brings Proton Pass Support - 9to5Linux<a href="https://9to5linux.com/keepassxc-2-7-10-open-source-password-manager-brings-proton-pass-support" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://9to5linux.com/keepassxc-2-7-10-open-source-password-manager-brings-proton-pass-support</a><a href="https://social.tchncs.de/tags/KeepassXC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeepassXC</a> <a href="https://social.tchncs.de/tags/Release" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Release</a> <a href="https://social.tchncs.de/tags/Passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passwordmanager</a> <a href="https://social.tchncs.de/tags/Opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Opensource</a>

Erik van Straten<a href="https://infosec.exchange/@sophieschmieg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sophieschmieg</a> <a href="https://infosec.exchange/@neilmadden" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@neilmadden</a> IMO we need to stop coming up with algorithms to securely store "derivatives" of typically weak passwords, as IT WILL FAIL.From <a href="https://www.akkadia.org/drepper/SHA-crypt.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.akkadia.org/drepper/SHA-crypt.txt</a>: ❝ In addition, the produced output for [...] MD5 has a short length which makes it possible to construct rainbow tables. ❞Please correct me if I'm wrong, but even in 2025 suggesting that a rainbow table is feasible for (lets cut a few bits for MD5 weaknesses) random numbers of 120 bits in length is BS (in order to create FUD).If I'm right about that, the least bad thing to do is:1) Everyone should use a password manager (pwmgr) because people simply do not have the ability to come up with a sufficiently strong password that is *unique for each account*, let alone for multiple accounts (sometimes hundreds), to remember them absolutely error-free, and to recall which password was chosen for which account.Note: IMO password *reuse* currently is the biggest threat. Entering a reused password on a fake (phishing) website may have devastating consequences, because (when a password is reused for multiple accounts) chances are that ALL those accounts are compromised. Note that the complexity and uniqueness of the password are IRELLEVANT. And, what KDF is used on the server, is IRRELEVANT as well.2) Let the pwngr generate a (cryptographically) random password, as long and with as much entropy as allowed by the server.3) Use a strong master password and NEVER forget it (typical beginner failure).4) Make sure the database is backed up in more than one place, and make a backup after each modification.5) Make sure that the device the password mamager is used on, *never* gets compromised.6) Double check that https:// is used. Better, make sure to use a browser that blocks http:// connections and warns you (Safari on iOS/iPadOS now supports "Not Secure Connection Warning"). In all browsers such a setting is OFF by default: ENABLE IT!7) On a mobile device: use "Autofill". The OS then transfers the domain name (shown in the browser's address bar) to the pwmgr. If a matching domain name is *not found* in the pw database, assume that you're on a (fake) phishing website! In that case: DO NOT ATTEMPT TO LOG IN by looking up credentials yourself. Reasons for 7, two examples: ---- fake: circle-ci·com real: circleci.com ---- fake: lîdl.be real: lidl.be ----If people would follow this advice (which is not just mine), even MD5 for storing a one-way derivative of the password on the server would be fine.HOWEVER: don't use MD5 - because "never use MD5 for whatever" is easier to remember than "don't use MD5 if preimage attacks are possible".P.S. I'm not a cryptographer (although I'm quite interested in the matter).<a href="https://infosec.exchange/tags/MD5" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MD5</a> <a href="https://infosec.exchange/tags/PasskeysStillSuck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasskeysStillSuck</a> <a href="https://infosec.exchange/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://infosec.exchange/tags/Autofill" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Autofill</a> <a href="https://infosec.exchange/tags/DomainName" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DomainName</a> <a href="https://infosec.exchange/tags/httpVShttps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#httpVShttps</a> <a href="https://infosec.exchange/tags/httpsVShttp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#httpsVShttp</a> <a href="https://infosec.exchange/tags/KDF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KDF</a> <a href="https://infosec.exchange/tags/Argon2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Argon2</a> <a href="https://infosec.exchange/tags/scrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scrypt</a> <a href="https://infosec.exchange/tags/bcrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bcrypt</a> <a href="https://infosec.exchange/tags/KeyDerivationFunction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeyDerivationFunction</a> <a href="https://infosec.exchange/tags/OneWayDerivative" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OneWayDerivative</a> <a href="https://infosec.exchange/tags/HashFunction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HashFunction</a> <a href="https://infosec.exchange/tags/Cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptography</a> <a href="https://infosec.exchange/tags/CryptographicHashFunction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptographicHashFunction</a>

Lars WirzeniusI've made release 0.3.0 of sopass, my command line password manager that uses a Stateless OpenPGP implementation for cryptography.* configuration file * add value from named file or stdin * default to rsop * manual page, built-in help<a href="https://sopass.liw.fi/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sopass.liw.fi/</a><a href="https://toot.liw.fi/tags/sopass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sopass</a> <a href="https://toot.liw.fi/tags/pass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pass</a> <a href="https://toot.liw.fi/tags/passwordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordManager</a> <a href="https://toot.liw.fi/tags/commandLine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#commandLine</a> <a href="https://toot.liw.fi/tags/cli" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cli</a> <a href="https://toot.liw.fi/tags/openpgp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openpgp</a> <a href="https://toot.liw.fi/tags/statelessOpenPGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#statelessOpenPGP</a> <a href="https://toot.liw.fi/tags/sop" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sop</a>

Giacomo Tesio<a href="https://mastodon.clipperz.is/users/gcsolaroli" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gcsolaroli@clipperz.is</a> Guarda, come sviluppatore web con ormai quasi 25 anni di esperienza, apprezzo l'architettura descritta qui: <a href="https://clipperz.is/security_privacy/" rel="nofollow noopener noreferrer" target="_blank">https://clipperz.is/security_privacy/</a> E sono ovviamente felice di trovare un italiano impegnato in questo tipo di progetti. Bello che <a href="https://snac.tesio.it?t=clipperz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Clipperz</a> possa girare offline (seppur in modalità readonly) e, se non sbaglio, gli basti PHP e MySql (che versioni) lato server. Suggerirei di integrare anche Sqlite, ma direi che sarebbe offtopic qui. In <a href="https://snac.tesio.it?t=selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a>, o ospitato presso un provider fidato, potrebbe essere una buona soluzione... se non fosse per la dipendenza dal browser. Non me ne volere, ma i browser contemporanei sono complicatissimi colabrodi dal punto di vista della sicurezza e della privacy. Per quanto buono sia il vostro codice (non ho ancora fatto un giro di debug, ma di default mi aspetto sempre il meglio da progetti <a href="https://snac.tesio.it?t=opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> tanto delicati), avete costruito sulla sabbia. O meglio, il Web è diventato una palude sotto i vostri piedi. Comprendo bene che, nel 2007 quando siete partiti, i browser (e l'informatica tutta) erano molto diversi da oggi. Per cui, per quanto apprezzi, in astratto l'architettura e gli obiettivi, continuo a preferire <a href="https://snac.tesio.it?t=passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a> offline, che riducono notevolmente (pur non azzerandola) la superficie di attacco. Detto questo, è un piacere poter discutere, in italiano, con persone competenti di questi temi! <a href="https://mastodon.uno/users/devol" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@devol@mastodon.uno</a> <a href="https://diggita.com/c/sicurezza" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sicurezza@diggita.com</a> <a href="https://mastodon.uno/users/quinta" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@quinta@mastodon.uno</a> <a href="https://mastodon.clipperz.is/users/clipperz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@clipperz@clipperz.is</a>

MystSafeEver wonder if your password really keeps you safe—or just gives away who you are? Discover how 12-word secret phrases can protect your privacy and boost security in my new post. <a href="https://www.mystsafe.com/post/passwords-vs-secret-phrases-understanding-the-key-differences" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.mystsafe.com/post/passwords-vs-secret-phrases-understanding-the-key-differences</a> <a href="https://mastodon.social/tags/Crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Crypto</a> <a href="https://mastodon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> <a href="https://mastodon.social/tags/Blockchain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Blockchain</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>

Giacomo TesioNon capirò mai perché usare un <a href="https://snac.tesio.it?t=passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a> online: <a href="https://keepassxc.org/" rel="nofollow noopener noreferrer" target="_blank">KeepassXC</a> e <a href="https://www.keepassdx.com/" rel="nofollow noopener noreferrer" target="_blank">KeepassDX</a> via <a href="https://f-droid.org/" rel="nofollow noopener noreferrer" target="_blank">F-Droid</a> sono nettamente più sicuri di qualsiasi cosa venga eseguita in un <a href="https://snac.tesio.it?t=browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browser</a> e, se sincronizzati ad esempio via NextCloud, altrettanto comodi. CC: <a href="https://mastodon.uno/users/devol" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@devol@mastodon.uno</a> <a href="https://diggita.com/c/sicurezza" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sicurezza@diggita.com</a> <a href="https://mastodon.uno/users/quinta" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@quinta@mastodon.uno</a> <a href="https://mastodon.clipperz.is/users/clipperz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@clipperz@clipperz.is</a>

Recherches récentes

Options de recherche

Administré par :

Statistiques du serveur :

#passwordmanager