I want this but as a Linux distribution.
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc Oh come on for fucks sake. I just migrated from KeepasXC to Vaultwarden/Bitwarden be außer of this shit. Passwordstore is great but the client and browser integration sucks. So now what?
-
@nina_kali_nina @luana @mcc oh FFS!!!! 🤬 I guess it’s back to KeepassXC and trying to sync across devices 😔
@not_a_label @nina_kali_nina @luana @mcc Keepass XC is also accepting slop code contributions
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc damn, i was hoping bitwarden would know better, been very happy with their stuff, now not sure what to do
-
@nina_kali_nina @luana @mcc oh FFS!!!! 🤬 I guess it’s back to KeepassXC and trying to sync across devices 😔
@not_a_label fwiw I've been syncing everything (including keepsss files) between Linux and Android devices using Syncthing, which replaced Dropbox for me, and I'm very happy with it indeed.
-
@not_a_label @nina_kali_nina @luana @mcc Keepass XC is also accepting slop code contributions
@sabrinabonfert @nina_kali_nina @luana @mcc we can’t have nice things any more, can we 😔
-
@redezem @nina_kali_nina @luana @mcc I’m coming to the conclusion that anything of substance will have LLM code in it wether intentionally or otherwise 😔
-
@nina_kali_nina @luana @mcc Bloody hell. Maybe at least those are some cosmetic changes, like, you know, fixing indentation or something equally benign?
#bitWarden -
@not_a_label fwiw I've been syncing everything (including keepsss files) between Linux and Android devices using Syncthing, which replaced Dropbox for me, and I'm very happy with it indeed.
I second syncthing! I'm very happy with it.
But if I'm honest I haven't checked it for malicious contributions.. -
@nina_kali_nina @luana @mcc The file being “hidden” is an issue with Github’s UI, the source code is not actually “hidden” from people who want to read it. Also, who cares if master breaks? Do you pull Bitwarden from master and compile it or do you download pre-built releases? A lot of anti-AI sentiment today seems to have zero thought put behind it.
-
@debacle@framapiaf.org @mcc@mastodon.social ...so linux or bsd or hurd? Linux distro uses linux kernel, bsd distro uses bsd, and no one uses hurd
-
@nina_kali_nina @luana @mcc @gabrielesvelto
Not saying they are not writing crap with claude but the commit in question (https://github.com/bitwarden/clients/commit/5dc49f2) is mainly renaming an icon module. -
@nina_kali_nina @luana @mcc @gabrielesvelto
Not saying they are not writing crap with claude but the commit in question (https://github.com/bitwarden/clients/commit/5dc49f2) is mainly renaming an icon module.@gabrielesvelto @nina_kali_nina @mcc @Timshel using a LLM for that is ridiculous and unreliable
-
@nina_kali_nina @luana @mcc et tu, Bitwarden 😭
-
@gabrielesvelto @nina_kali_nina @mcc @Timshel using a LLM for that is ridiculous and unreliable
@luana @nina_kali_nina @mcc @Timshel Indeed, that's a job for sed or an IDE's refactoring tool if you feel fancy. Doing that kind of work with an LLM is unreliable and ridiculously expensive.
-
@lunarloony @nina_kali_nina what I'm using is old school, open source, self hosted and ai free: https://www.passwordstore.org/
@lhengstmengel @lunarloony @nina_kali_nina is to possible sync the pass store with an Android phone?
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc For the Bitwarden CLI, I was already not using it because it requires running code from NPM outside of a browser, but https://github.com/doy/rbw is a great alternative.
-
@lhengstmengel @lunarloony @nina_kali_nina is to possible sync the pass store with an Android phone?
@aiono @lunarloony @nina_kali_nina yes, there is an android app available that works quite good: https://f-droid.org/packages/app.passwordstore.agrahn
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc "In the recently published blog post titled “About KeePassXC’s Code Quality Control“, the team stresses that AI assists developers during the review and drafting process, but no AI-generated code is merged into the KeePassXC codebase. The application itself remains fully human-written and continues to follow the rigorous security standards that its users expect."
https://linuxiac.com/keepassxc-clarifies-ai-policy-used-only-in-development-never-in-the-app/
-
RE: https://mastodon.scot/@kim_harding/116108957641748718
I want this but as a Linux distribution. I don't think I'm asking for much here. I am just asking for the "open source community" to be to the left of Goldman Sachs
@mcc Has Rust crossed the line yet? Rust has been such a valuable tool that I'm going to be really upset if we have to either give it up or fragment the community.
-
@nina_kali_nina > These PRs are generally very difficult to review for humans.
Is it difficult for humans using AI? I’ve heard it’s easier that way 😁
The anti-AI crowd is more than welcome to put in the work and fork the projects they criticize for using LLMs and maintain their own repo with 100% organic homegrown code, I wouldn’t hold my breath waiting for that though, being outraged over other people’s generous contributions is far more attractive.