I want this but as a Linux distribution.
Uncategorized
207
Posts
103
Posters
5
Views
-
@redfire Which version is that, by the way?
@mcc Not at my computer currently but I believe its 2.7.9.
-
RE: https://mastodon.scot/@kim_harding/116108957641748718
I want this but as a Linux distribution. I don't think I'm asking for much here. I am just asking for the "open source community" to be to the left of Goldman Sachs
@mcc I am honestly a bit scared to find out which projects use gen AI. I do not want any of such code running on any of my devices.
-
@nina_kali_nina @luana @mcc Great. Password manager migration was really not what I needed on my to do list right now
-
@nina_kali_nina @luana @mcc Great. Password manager migration was really not what I needed on my to do list right now
@lunarloony @luana @mcc but it's like: where to? 😔
-
One thing for sure, I’ve got a fire under my butt to get out of 1password pretty quick.
@johnlehet @mcc I knew 1password was getting worse, my renewal is soon and that's not happening now. Someone in thread said keepass 2.x isn't infected with AI. There's passwordstore.org and passky.org which I just learned about. Honestly I'm not sure what to try, this is a big PITA.
-
RE: https://mastodon.scot/@kim_harding/116108957641748718
I want this but as a Linux distribution. I don't think I'm asking for much here. I am just asking for the "open source community" to be to the left of Goldman Sachs
@mcc So uh I have bad news about this Linux thing...
-
@lunarloony @luana @mcc but it's like: where to? 😔
@nina_kali_nina I was tempted to do Vaultwarden, but the Bitwarden clients are affected so I don't think that'd help much. Might be an okay stop-gap until I have the time to invest in it properly.
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc Which reminds me, how is the reimplementation of Bitwarden, Vaultwarden, doing in that regard? I'm using the latter precisely because I'm wary of depending on a commercial product that happens to be open-source, but can yank the open licensing at any point in time. -
@itamarst Well, there is no universe where I would consider using 1password, but I guess that's still good to know
@mcc @itamarst I thought KeePassXC required human reviews / unit tests in order to mitigate any llm harms. Did that change?
More broadly, I don't really see how you can prove no LLMs were involved in code contributions if they are actually contributed by a human. Prove you used emacs or vi and didn't compile it ever on a cloud service? (I'm not happy about that state of affairs, mind you)
I suppose we can start adding some sort of watermark on code?
-
@WideEyedCurious @Lingmops @mcc Wondering if there's a way to save OTP derivation keys in an encrypted file, then use the CLI to decrypt and then derive the current six-digit code.
-
My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline
@mcc Aw man that sucks. Why would they... Ugh.
-
@mcc KeePass 2 is clean.
If you're looking for an alternative to KeePassXC, GNOME Secrets is pretty much a drop-in replacement.
-
@mcc Excuse an undereducated question from a long term 1password user who is going to move from it now: is the issue with “random code generators” that random passwords generated by these apps are easy to crack?
I’m looking at moving to Keepassium and as I understand it each of these apps in this family have different code to do password generating and are thus all different.
@johnlehet @mcc My educated guess is the problems are more likely to be things like
- sync protocol has a security flaw that makes it possible for malware in coffee shop wifi router to learn all your passwords
- sync protocol just plain stops working
- restoration of offline backups stops working, nobody notices for months
-
@argv_minus_one @elfin that's great, but can it interop with a phone?
-
@mcc @itamarst I thought KeePassXC required human reviews / unit tests in order to mitigate any llm harms. Did that change?
More broadly, I don't really see how you can prove no LLMs were involved in code contributions if they are actually contributed by a human. Prove you used emacs or vi and didn't compile it ever on a cloud service? (I'm not happy about that state of affairs, mind you)
I suppose we can start adding some sort of watermark on code?
"I thought KeePassXC required human reviews / unit tests in order to mitigate any llm harms. Did that change?"
I literally don't give a shit. If you think it's OK to generate computer source code from a neural network, I don't trust yr judgement enough to trust your code reviews.
"More broadly, I don't really see how you can prove no LLMs were involved in code contributions if they are actually contributed by a human."
Same way you enforce any policy against stolen code
-
-
@argv_minus_one @elfin that's great, but can it interop with a phone?
-
@mcc Which reminds me, how is the reimplementation of Bitwarden, Vaultwarden, doing in that regard? I'm using the latter precisely because I'm wary of depending on a commercial product that happens to be open-source, but can yank the open licensing at any point in time.
@csolisr i'm told elsewhere in thread that vaultwarden has not accepted AI code, but vaultwarden replaces the *server*, not the client, right?
-
@argv_minus_one @elfin I do not use keepassxc
EDIT: checking google there *is* a "Keepass2Android", one assumes forked from the original keepass
-
@ariadne @mcc @xarvos that would be the pretty way. Another pretty way would be having nixpkgs maintainers add that info.
I said it was an awful way that would require full system building for a reason, I imagine it’s possible to override the default check phase or even the fetchers to check the downloaded src for .copilot and alike and fail if present.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@yosh
Oh! Here in Italy we often use Dado da cucina https://it.wikipedia.org/wiki/Dado_%28cucina%29 aka Bouillon cube - https://en.wikipedia.org/wiki/Bouillon_cube which contains 10-15% msg.
So yes it is a quick trick to flavour foods.
-
@stefano oh f**** it, we all have a bad day from time to time, what matters is the frequency 🤗
-
@mark I don't know what a Google Workspace account is, so probably not?
-
@jwz Is the jwz account hosting an app with publish status of "Testing?" That is one thing that will cause that. It could be there is also an option buried in something you chose a long time ago.
Every single time I've ever gotten OAuth to do what I wanted (and it was a significant portion of my day job at one point) it seems like a minor miracle.
-
Oberwassermeister.
-
@jwz Is one of them attached to a Google Workspace account?
-
@roots wow!
-
@gewt 1985 album by German metal band Accept
