391–399 of 399 posts
Earlier quoted context omitted.
> Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key. How would you remember a password of 128bit of entropy?
Here's a 142bits entropy password: CorrectHorseBatteryStaple Also see: https://xkcd.com/936/
Earlier quoted context omitted.
9-10 words chosen at random from a list of 10k common words in you native language will get you to 128 bits. Sure not trivial to memorise, but far from impossible.
You're not wrong of course - this would come with heavy UX issues though. E.g. it's hard to type 10 words into a password field without messing up. And _really_ hard on a mobile device. 1P would allow you to have a password like "1234" and still have the same key entropy as that 10 word password alone.
Earlier quoted context omitted.
Most people will though, because they’re either in the Android or Apple ecosystems.
Yeah but only being about to login to something if you’re on a certain ecosystem is horrible lock in. It’s why I always choose email sign in over Apple.
It makes sense to approach this new paradigm with a healthy dose of skepticism, but there is evidence your concerns have solutions.
Earlier quoted context omitted.
The thing is, founders can get fabulously wealthy with a lifestyle business or at least very wealthy, but it might take longer. But all the established money seeking rent parked at VC firms can't get a cut if you don't play ball with them.
Yeah, wealthy enough if not billionaire, true. > But all the established money seeking rent parked at VC firms can't get a cut if you don't play ball with them. OK, but why does a founder care about that? Either they think their business model can't get them to a sustainable lifestyle business without external capital investment... or they want to get more-than-lifestyle-business wealthy, right?
Earlier quoted context omitted.
If you can't say "fuck you" with a couple million in the bank, tax paid, in 2023 then you're living WAY outside your means.
I can say "fuck you" with no money at all, since I can still talk for free! How much do you need to take a, say, $130K income for the rest of your life? (Which is still not really enough to live at a wealthy luxury standard). Depends on how old you are and how long you'll live, as well as anticipated rates of investment return. But it's almost definitely more than 2 million. https://www.thekickassentrepreneur.com/nev…
See John Goodman in the Big Lebowski for a full definition.
One can easily self host a bitwarden server on digitalocean. https://bitwarden.com/blog/digitalocean-marketplace/ However, I'm curious what y'all think about the cost. A digitalocean droplet for the recommended specs (4 GiB memory) is $24/month. This is hard to stomach when you compare with Bitwarden Premium which is <$1/month. I guess it depends on how much you value your own data.
I’ve been using the keepass ecosystem for years after switching from 1password. It’s open source, highly portable, and you don’t need a degree to set it up.
Yes, but password sharing in a team is no fun. You could use a completely separated password file, but then you might end up with a lot of password files with different passwords that need to be managed in another Keepass file. In theory there are child databases in Keepass, but using them with different clients and cloud sync never worked for me.
Earlier quoted context omitted.
Also Bitwarden recently raised 100M from VC so yeah, the clock is ticking now.
Ah for fuck's sake. It keeps happening to all the software I love. I guess I'll have to stop relying on convenience (I was a 1Password user years ago) and go 100% open-source. None of the libre offerings seem to be as convenient and polished, but at least they're not into some VC's pocket ready to squeeze as much profit as possible out of my paid membership. What's a good OSS alternative that works with iOS and Linux…
Earlier quoted context omitted.
But in the context of a strong master password, the additional benefit of the secret key is of neglible benefit, while the hassle and dangers of having to synchronise the secret key remain. I'd rather use an extremely high entropy master password by itself.
How do you remember a 128 bit entropy password?