For iOS devices the most up to date client is "Strongbox". I don't think it is FOSS, but is compliant with the standard. It's sadly a freemium app, but is quite well made in my testing. It cannot sync with syncthing, but does support several cloud services, its own service (which uses iCloud), and local file transfer over LAN. They also have a version of the app with all network connectivity removed for security (if you prefer)
Whooping_Seal
joined 2 years ago
This is perhaps overkill, but you can also encrypt the contents of your online cloud storage with CryFS / Cryptomater. This is particularly useful if you wish to store sensitive documents (healthcare, finances etc) in a cloud environment in case of catastrophic destruction of property (destroying computers / on site backups of data).
In this case you can also backup your keepass file in this encrypted virtual storage medium, on top of the prexisting encryption of the database itself.
My personal choice right now is KeePassXC (PC) / KeePassDX (Android) + Syncthing And Aegis (Android) for 2FA codes, with a yubikey for services that support FIDO keys.
Overall I like this setup because it's decentralized and does not rely on a third party server structure. The only "weak" point would be the Syncthing relay servers or the Tailscale VPN that I use, but this goes back to ensuring encryption of the database is adequate with a long password, and using an open source synchronization protocol that ideally has been vetted by a trusted third party (or yourself if you're capable)
I used to use Bitwarden, and I highly recommend it. I really appreciated it's ability to integrate with email aliasing solutions to generate new aliases from within the bitwarden UI itself. However, my main reasons for switching were the following
- I don't have the money to pay for it (uni student)
- I prefer a more self-hosted approach (I will consider using vaultwarden in the future when I have more money)
- I wanted to move away from using a browser extension for password management on desktop. KeePass' auto type feature is really good, and a more secure input method than a browser extension autofill.
The only additional advice I have for both recommendations is that I do not think it advisable to add Totp 2fa information to your password manager even if it supports it. I feel like this should be separate, on a single device, and backed up in ~2 locations (one preferably off site). This is really to avoid problems if a device is compromised and if your password manager is compromised, but this is definitely in the more unlikely category I feel.
My only major issues with keepass are the potential for sync conflicts and the some feature differences between platforms. A centralized server config like vault/bitwarden prevents the sync conflict issues, at the cost of having one point of failure. The feature differences problem isn't too great, but autotype doesn't work on Linux if you install with flatpak, and you can't prevent screen capture of the app on Linux (only on Android and Windows from my understanding)
Edit: I also tried gopass, it's really fun to have an entire CLI based password manager, but frankly the state of mobile companion apps are appalling. The Android option only is good if you use a dev version, and the iOS one I thought was just ok. I also dislike the metadata leaking that is inherent to the format, and that PGP is the main form of encryption for the time being (some clients were looking at using AGE at some point). Overall it's a cool but flawed concept, and I feel my other two recommendations are superior.
I think it's important to see these types of efforts, while I'll never go out and buy a MacBook the effort isn't wasted since it gives current users more freedom and future people buying used laptops more options for Linux compatible hardware.
Without a project like this, that hardware will end up being e-waste a lot sooner than it should be, when Apple drops support. At least to me I see an ethical and moral imperative for projects like this, but I also understand people's grievances with Apple.
I might make the plunge soon as my desktop is just slightly too old—but, at the same time, I need Windows for a few things for work so it's a little frustrating 🫠
Gaming wise I'm completely able to use Linux, but I also don't really play competitive games with anti-cheat so it is not exactly surprising.
I think you summed up my thoughts on the matter much better than I could have. In particular, the “digital” / “corporate” right to be forgotten is distinct and much more specific in its scope than a broader right, and is a rather important consumer protection in my opinion.
Do you have a separate computer that you can use to do a “test run” of using Linux? If not, I would at least play around with Linux in a virtual machine before committing to the bit (and I say this as someone who has been using Linux laptop / Windows desktop for 6-7 ish years now)
You have a few options on what you can do to limit your child's usage of a device.
NextDNS has some interesting features for parental controls, as well as some options to try and prevent bypassing it (i have yet to try it though). On iOS it can be installed as a device profile and you can prevent them from being uninstalled, I'm not sure how to go about this on android but I'm sure there's a way of limiting the child's access to changing the settings.
Otherwise the built in parental control features on Android and iOS seem to be very useful as well, since you can limit what your child can install, set screen time limits, etc. I am pretty sure you'd want a more recent version of Android however to get all of the features here which may not be possible depending on the budget.
If you just want the ability to call / text then perhaps a dumb phone is a good first step? But a smart phone may be more useful if they're older.
Some older consoles have very negligible size libraries in modern day terms, and who knows what sources of ROMs will be taken down by lawsuits in the next few decades. I feel like there is some sense in making a complete archive of a systems game library, but for my personal use I usually just download / dump / rip what I need specifically.
Whatever file format I use them in is also how I back them up, I backup my entire desktop's and laptop's data to an external hard drive and an online service provider. I'm sure a compressed format would be more space efficient but that would take much more time given my use case.
In the case of my laptop it runs Linux and the filesystem I use supports "transparent compression" (almost all contents of the drive are compressed with zstd), so I'm guessing any of the ROMs on there will have already been compressed as nuch as they can (but I'm not knowledgeable enough on the file format specs)
The foundation supports a bunch of other open source projects, after all there is a lot more to devices that run the Linux kernel then just the kernel.
Also, I found it a but funny that the foundation created the PDF using Adobe InDesign 19.4 (Windows), according to the metadata in file posted on their website. (original | archive of the PDF)
The wallpaper is just a cropped image from the scans of the games manual found here, note these are spoilers!, Tunic is an absolutely lovely game I have been playing on my Switch and I highly recommend it to people who really enjoy the difficulty of older Nintendo games but want a more polished experience. The way the game integrates the "manual" is really intriguing
For a while I was experimenting with different plasma themes but I landed back on the good old reliable gruvbox dark theme.
Edit: my apologies for not perfectly aligning two of the images in Gimp, I forgot to press the button that aligns them horizontally and not just vertically :p
I am just curious if anyone here changes it from the default (disabled) state. Would you say the telemetry data is particularly useful to the developers & respectful to the user? I generally disable all telemetry even on open source software but I am happy to hear people's arguments for enabling some of it if it helps the developers in a privacy respecting way.
Enjoy your day!
13
As in the image, there's a header that mentions the email auth being enabled and to check spam. Jerboa renders it quite oddly. Is this expected behaviour (as in instance admins shouldn't add text like this) or is this worthy of a github issue?
This image depicts the actual site, the following text: NEW USERS: We have temporarily enabled email verification until Captchas have been re-released. If you do not get an email please check your spam/junk folder. is the problem.
Edit: According to our instance admin this is a jerboa issue. "Its not rendering an element thats available within the lemmy features. Not doing anything custom that lemmy doesnt do"
I shall file a bug report later tonight unless someone beats me to it!
Update: An issue was already filed, you may follow it here
Update 2: This issue was fixed with this merge
view more: next ›
If you don't mind me asking, what makes gnome more adaptable in terms of functionality than KDE?