ChiefGhost295

joined 1 year ago
[–] ChiefGhost295@lemmy.one 15 points 1 month ago* (last edited 1 month ago)

Since the vault is end-to-end encrypted, it shouldn’t matter where it is hosted, even if it is in the cloud. Here is what a security researcher and a password cracker Jeremy M. Gosney has said about this after the LastPass incident.

”Is the cloud the problem? No. The vast majority of issues LastPass has had have nothing to do with the fact that it is a cloud-based solution. Further, consider the fact that the threat model for a cloud-based password management solution should *start* with the vault being compromised. In fact, if password management is done correctly, I should be able to host my vault anywhere, even openly downloadable (open S3 bucket, unauthenticated HTTPS, etc.) without concern. I wouldn't do that, of course, but the point is the vault should be just that -- a vault, not a lockbox.”

[–] ChiefGhost295@lemmy.one 5 points 3 months ago

PrivacyGuides has also just recently started to recommend Redlib.

[–] ChiefGhost295@lemmy.one 22 points 5 months ago (1 children)

Interestingly, the article mentions twice how Proton doesn't do flashy marketing campaigns when that is precisely the aspect people have criticized Proton for years, usually around Black Friday when they portray the discount as much better than what it is.

[–] ChiefGhost295@lemmy.one 15 points 5 months ago

This is also not their only controversy. When someone proposed in their forums that Kagi should add a widget that would help people get help if they are searching for suicide material, Kagi refused because that isn't the result that the person was searching for.

[–] ChiefGhost295@lemmy.one 3 points 7 months ago (3 children)

Read the article. Google already requires a warrant before handing out this data.

[–] ChiefGhost295@lemmy.one 1 points 7 months ago

Tidal brought FLAC this year, so this MQA critique doesn't really apply anymore.

[–] ChiefGhost295@lemmy.one 1 points 9 months ago (1 children)

This is wrong. By enabling privacy.resistFingerprinting you cannot make yourself more unique in Firefox because you’re already unique. I would read this guide by the Arkenfox project about fingerprinting. The guy has worked for the Tor browser, so he knows his stuff. The summary is that the privacy.resistFingerprinting is the best tool that Firefox has against fingerprinting, but it can only ”fool naive scripts.” If you’re really worried about fingerprinting and want to defeat advancing fingerprinting, the only option is to use either Tor or Mullvad Browser depending on your threat model.

[–] ChiefGhost295@lemmy.one 31 points 9 months ago (10 children)

The Firefox hardening project Arkenfox only recommends uBlock Origin. Everything else is redundant.