donnachaidh

joined 1 year ago
[–] donnachaidh@lemmy.world 8 points 1 year ago

My understanding was that the browser vendor itself would be the attester. So if Google says it's Google Chrome, it probably is. Unless you somehow reverse engineer how Google decides that it's Google Chrome and spoof that or something...

[–] donnachaidh@lemmy.world 9 points 1 year ago (2 children)

I'm not disagreeing about the result, Lemmy definitely feels less spammy/trolly, but either you or I have misunderstood something about registration. As far as I'm aware, any rate-limiting, proof of personhood, email verification, etc. is completely a per-instance thing. So all you'd need is an instance that's permissive to get heaps of accounts. Or even if there aren't any permissive ones (that haven't been defederated), you could host a private instance, or sign up on multiple instances. However permissive Reddit is, I don't think Lemmy fundamentally has the capability to be particularly restrictive.

[–] donnachaidh@lemmy.world 1 points 1 year ago (1 children)

If I were running a business and had to share passwords and control access to things for multiple users, that's probably what I'd do, but all I need is a synced password storage. Self-hosting a server's probably overkill for that.

Also, isn't the vault itself encrypted? You shouldn't have to encrypt extra to do a backup.

[–] donnachaidh@lemmy.world 23 points 1 year ago (3 children)

I have been using BitWarden, and it's pretty good, but I'm shifting over to Keepass now, syncing the database with syncthing. Means I don't have to trust they won't be breached, but it is definitely a bit more of a faff to get set up. For anyone unsure, I would definitely recommend a managed service like BitWarden though. I got my sister on it, who would probably have a single password for everything otherwise, and she got the hang of it super quick.