artyom

joined 1 month ago
[–] artyom@piefed.social -1 points 5 days ago (2 children)

No they don't. Interest =/= sales.

[–] artyom@piefed.social 1 points 5 days ago

There are ads in the app for Proton Pass, so that's my best guess.

[–] artyom@piefed.social 0 points 5 days ago (8 children)

It's a nice idea but:

  1. There's no more federal rebate
  2. No one wants 2-door trucks or SUVs anymore. That's why they stopped making them.

I like it, but it won't work.

[–] artyom@piefed.social 2 points 5 days ago

Yes, the biggest difference is that Proton Auth seems to work without an account.

[–] artyom@piefed.social 24 points 5 days ago

It's sad that any of this was ever allowed to happen in the first place, and that it took a giant corporation to break it up. This shit should have been stomped out 20 years ago when it was beginning.

[–] artyom@piefed.social 5 points 5 days ago (2 children)

Honestly it's pretty crazy that Steam hasn't entered the most lucrative gaming market.

[–] artyom@piefed.social 13 points 5 days ago

A lot of people think fragmentation of digital markets will deliver a worse experience.

While it does add a tiny amount of friction, the trade-offs are massive.

[–] artyom@piefed.social 2 points 5 days ago

since you or someone else can't host the server, since that is closed source

You don't need to host the server, you just move your domain to a different provider. It's nothing more than a 3 minute DNS config change.

[–] artyom@piefed.social 13 points 5 days ago (3 children)

Yes that's why I said:

If you already use Proton Pass, I think I'd recommend Ente Auth instead

[–] artyom@piefed.social 5 points 5 days ago

Proton Pass specifically, is not problematic. The problematic part is just having both passwords and TOTP keys in the same vault (basket).

[–] artyom@piefed.social 5 points 5 days ago (2 children)

Am I wrong in thinking that it depends on the specific service?

Yes. The concern is that if your account for your password manager is compromised, your passwords and 2FA tokens are both compromised. Whereas if you kept your 2FA in a different account, only your passwords are compromised. All services work this way. Proton has suggested creating a second account for your 2FA codes, even though it violates their own ToS.

For example, your e-mail address (if not using a custom domain) cannot be changed overnight, and it will probably take years to move everything over. Think carefully about where you put your e-mail!

That's why I tell everyone I know to get their own domain. Not just for email, but for a variety of things. If nothing else, I run a Linkstack that has all of my personal information, so when people ask me for it, I send them there, and let them contact me however they wish. I've actually managed to get it to the top of the Google search results somehow so people can just Google me and easily find it as well. It grants you a whole lot of autonomy over your digital identity.

Changing your email host is just a matter of a simple DNS config change. When I changed from Google it was indeed a nightmare. Several companies I realized don't even have mechanisms to change your email address because it is actually your identity in their system. I had to delete my account and open a new one. They had no other mechanism. Which is absurd. Other companies would send some things to my new email and other (important) things would continue to be sent to my old email, for reasons no one would explain to me. They are simply not technologically equipped to handle this sort of change. All in all it took about a year before I was comfortable deleting my Google account.

[–] artyom@piefed.social 9 points 5 days ago (3 children)

Correct. However it's worth noting that passwords are almost always compromised server-side. So 2FA is far more a mitigation of data breaches from the provider, rather than your password manager being breached.

view more: ‹ prev next ›