Physics and Free Software

  • 16 Posts
  • 506 Comments
Joined 1 year ago
cake
Cake day: June 5th, 2023

help-circle
  • Do something that will make them laugh and enjoy themselves.

    I gave a seminar once that ended with a demonstration of the terminal, ssh, and nginx. I had everyone go to the url where I was hosting a hello world. I killed the server over ssh and told them to refresh the page. Nothing there. I swapped the page, turned it back on, and told them to refresh the page again. I Rick Rolled them. They all laughed. It may not have been the most informative talk, I didn’t really ‘teach’ them anything, but I got some good questions afterwards.

    Be creative and make it fun and they will come to you.






  • There’s often the ‘security vs. convenience’ tradeoff, but for most people you have both sides with Bitwarden over KeePass.

    Bitwarden is undoubtedly more convenient. If you can create an account, you can use it. I have a family account, and have both of my parents using it. The love it now, but given the friction to get them there in the first place, it would impossible to get them on KeePass. Especially because they wanted their passwords on all devices.

    Regardless of using Vaultwarden or KeePass, you need to have quite a bit of expertise to self host. And you are trusting your own ability to secure your attack surface. I’m sure many if not most in this thread can, but it would take me quite a while to convince myself I have. I would much rather trust security professionals.

    Somewhat, although, potentially related. Have you seen Bitwarden’s git repos? It is immaculately organized.

    Consistent, clear naming convention. There is literally one called ‘self-host’. If you put that much effort into keeping your code that useable/available/auditable etc. Oh yea. I’m going to trust you to handle security for me