171–180 of 197 posts
Earlier quoted context omitted.
I just wrote up instructions for accessing my backups for my wife and friend, and my critical accounts have dead-man switches to give my wife access to everything she would need. Assuming what she needs is access to my email (yes) and gigabyte of photos from my drunk college days (no).
What are you using for a deadman switch?
Earlier quoted context omitted.
What are you using for a deadman switch?
The system I'd trust most is to have 2 attorneys given sealed envelopes with instructions to give them to your wife on your death. One attorney is given an envelope with the passwords to your accounts (or to your password manager) encrypted with a one time pad. The other attorney is given an envelope with the key to it. Each envelope includes instructions to decrypt. If you're giving her a password to a password mana…
Much less tedious, and concentrates trust in the one person who should have it - the spouse!
Earlier quoted context omitted.
And for those of us who aren't wealthy enough to have two different attorneys on retainer, giving your spouse the encrypted password store along with the key to a safety deposit box containing the decryption key would have to do. Personally, my wife would wonder why I'm going to so much trouble to keep my passwords secret from her until I die; but then my personal password store is for services we share like banking,…
This is more of a thought experiment, but would also serve as a decent backup in case of natural disaster, house burning down, etc. As for safety deposit boxes, those can be closed out for nonpayment, bank branches will shut down, etc. Not the best hands off long term solution. An attorney will let you know if there's an issue because it's their ass on the line if they don't.
Earlier quoted context omitted.
... or what if you are traveling and your phone and laptop are lost or stolen?
Your bitwarden password manager is hosted and is only stored encrypted on your phone/laptop. So unless the thief knows your master password you should be fine.
Earlier quoted context omitted.
This is more of a thought experiment, but would also serve as a decent backup in case of natural disaster, house burning down, etc. As for safety deposit boxes, those can be closed out for nonpayment, bank branches will shut down, etc. Not the best hands off long term solution. An attorney will let you know if there's an issue because it's their ass on the line if they don't.
Unless they die.
Earlier quoted context omitted.
Your bitwarden password manager is hosted and is only stored encrypted on your phone/laptop. So unless the thief knows your master password you should be fine.
I understand that the thief won't have access to my accounts, but now I don't either - correct?
Earlier quoted context omitted.
Or you can simply run an application level default-deny firewall and never use a web browser. You don't need to keep your software up-to-date in a homelab.
But then you can't access your data outside your local network. That may be acceptable depending on your use case, but at that point it's not a 1-to-1 alternative to cloud services.
Earlier quoted context omitted.
Apple will likely launch Armv9 CPUs (iDevice A16 and MacBook M2) this year. If they don't enable CCA and memory tagging, then we have to wait for Armv9 support in QEMU and a future Qualcomm SoC, https://www.anandtech.com/show/16584/arm-announces-armv9-arc... > CCA introduces a new concept of dynamically created “realms”, which can be viewed as secured containerised execution environments that are completely opaque to…
That only works if you are running a trusted OS atop that hardware, and you simply cannot trust proprietary software. Apple do not permit iOS users to run any software they desire, and attempted to run spyware on all iOS devices; I think one cannot trust them not to have a backdoor in any 'secure' execution environment. Now, if Linux or OpenBSD released support for that hardware, you might be able to trust it.
Earlier quoted context omitted.
The system I'd trust most is to have 2 attorneys given sealed envelopes with instructions to give them to your wife on your death. One attorney is given an envelope with the passwords to your accounts (or to your password manager) encrypted with a one time pad. The other attorney is given an envelope with the key to it. Each envelope includes instructions to decrypt. If you're giving her a password to a password mana…
I'd just write down my accounts and passwords on an index card, laminate it, and give it to my wife to store in the safety deposit box. Much less tedious, and concentrates trust in the one person who should have it - the spouse!
A bit of research might be indicated, before trusting this strategy to perform when needed.
Earlier quoted context omitted.
But then you can't access your data outside your local network. That may be acceptable depending on your use case, but at that point it's not a 1-to-1 alternative to cloud services.
SSH tunnel with passwords disabled; use ed25519 keys. Or wireguard if you are feeling adventurous
Also, are you going to SSH in every time you need to access a document from your phone? Again, use-cases differ, but that's not a 1-to-1 alternative to, say, Dropbox.