<a rel="me" href="https://layer8.space/@helix">Mastodon</a>
I have years of experience with GPG and still didn’t manage to set up a shared password repository with pass and derivates which is usable by people without my experience. I’m talking junior devs, senior devs and junior admins here. I only managed to make it work between a few DevOps and admin people. Our senior DevOps guy didn’t even bother because it has so many papercuts.
The most promising client to me apart from gopass (not to confuse with go-pass) was QtPass but even that was lightyears away from KeePassXC in terms of UX.
Maybe another thing to add is that there’s pass-import which can convert several different formats of password stores between each other and to pass itself.
There’s an Open Source implementation called Vaultwarden. You should certainly export your passwords from Bitwarden so they can’t keep them hostage.
Alternatives include Passbolt (no offline client, weird French crypto implementation of RSA), KeePassXC (best for single users, not good for sharing) and QtPass/gopass/pass (best solution if you are very proficient with GPG and like the command line).
https://github.com/morrownr/USB-WiFi
WPA3 is mostly a software feature. The fastest you can get for Linux right now is AC 1300.
Thank you a lot for the extensive und thorough answer which is not just “abolish Google, raid their headquarters and delete your data yourself”. It actually helps me. I know I could use GrapheneOS and remove everything Google from my life, but then again, there are certain apps I really need, which don’t work without Google even if you try really hard. For example my transport tickets would be 20% more expensive if I didn’t use the local transport authority’s app, Signal is only distributed through the Play Store etc. etc. – what’s even worse is, that these apps wouldn’t even need the Play Services if the developers really wanted it.
just use a more privacy friendly SMS app and phone app.
I use LineageOS, so I guess the integrated SMS and phone apps don’t do this?
better quick win would be using private and secure messenging, calling, and video chatting services
Also a good recommendation, thanks.
Most of my communication is through Matrix, Signal and Mail and I’m using encrypted phone calls through Signal and Matrix, so at least I’m somewhat safe from Google in that regard. Of course I still hemorrhage metadata, but privacy is not an all-or-nothing situation like many privacy evangelists shout into the void.
This is malicious and contrary to everything Open Source stands for. You can just guarantee this rather hits the regular people barely making a living with their limited JS skills instead of any higher ups or military.
If you want peace, you should be peaceful.
Additionally, this shows how fucked the JS ecosystem is. Node and npm in particular are the playground of so many malicious actors it’s laughable people still use them.
Yeah, and since the devs obviously are either too inept to change this or don’t care, they probably never will – this “idea about a runtime mode” issue is open since 2014.
2014 was the same year Microsoft ended support for Windows XP.
Which programs and why did you fail?