Re: [gentoo-user] Moving from Lastpass to Bitwarden

[Frank Steinmetzger]

Am Thu, Feb 18, 2021 at 10:07:17AM -0600 schrieb Dale:

> > Call me Ishmael^wold-fashioned. I don’t trust the Internet with anything
> > sensitive. Even if the other party behaves trustworthy (trustwortily?). If
> > it’s on someone else’s system, it’s out of my reach. A password database not
> > only contains the passwords themselves, but naturally also what I have
> > passwords for in the first place.
>
> Thing is, your stuff is likely on the internet already.  You have a bank
> account?  […] If you have
> credit of any kind, they have your info on the internet already.  It's
> how they work.

> You may think you are protecting yourself but really, you're not.

Your point is valid. Let’s call what I do minimising the attack surface. :)

> Pretending the internet doesn't exist just isn't good.  It exists
> whether you use it or not.  Just keep in mind, people who have info on
> you use it and so does the ones who might want that info.

Hence my reluctance to put everything out there. Granted, lastpass is one of
the brighter examples. On the other extreme, people™ give away their details
to rebate systems just to “save” a few bucks on their next grocery shopping.

> I consider that a false sense of security.  You may feel secure but you
> are sadly mistaken.  Unless you live with no digital footprint at all,
> likely impossible, you already have info out there. 
>
> I still trust Lastpass and for those willing to pay for it, I'd
> recommend it in a heart beat.  It's widely used and secure.

Well argued.


[rant mode on, feel free to skip, I shall hold my peace thereafter]

The general tendency of both private individuals and companies towards
dependence on cloud services is just something I can’t grasp. A car
manufacturer has no business knowing in real-time where I might go, but
still they take that data simply because it is there. They might not do
anything fishy with it *now*. But who knows about two years hence, or what
the best governments money can buy think of next, or insurance companies
(give us your data or we’ll raise your premiums). Usually, the benefits only
go up the chain, not to you, the customer (or rather the “consumer”).
As you say – the data is already out there. And I have absolutely no control
over what company A tells company B tells company C and what each company
does with it. Promises and assurances from entities and politicians are
worth crap these days, either by decision (“changed circumstances, we need
that now”) or by accident (“oops, we left our database open, we apologise,
but your privacy is still important to us”).

Avoiding Windows is a good start, I think we can all agree on that at least.

[rant mode off]

> Just my angle of view.  ;-)

:)

-- 
Gruß | Greetings | Qapla’
Please do not share anything from, with or about me on any social network.

No mabob without a thingy.