Privacy

34089 readers

181 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

Which password manager to use? (sopuli.xyz)

submitted 1 week ago* (last edited 1 week ago) by [email protected] to c/[email protected]

71 comments fedilink hide all child comments

I currently use KeepassXC that is synced through NextCloud. The sync isn't very elegant, especially on my phone. So I'm looking for a new password manager, which has a native server sync support that I can self host. What do y'all recommend? I need at least a phone app and a browser integration that can autofill.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 2 days ago

Let's say I have an unupdated patch and my server is now vulnerable.

This could really happen. I have work and life to worry about and I might not notice.

This vulnerability, could be in the BW instance itself (say the web server or the backend itself), or in the server itself (say an old OpenSSH version), or another service (NextCloud instance hosted in the same server under a different subdomain).

So, first we see it's a big attack surface. In any of those entrances an attacker could gain access to my server and with it the vault. It's a short way from there to install a keylogger on the website where BW is hosted, and get my master password ¯_(ツ)_/¯.

Now take into consideration that I just sat a couple of minutes to think about this, and I'm not a professional in cyber security or web security. Neither blue nor red team. A professional, with more knowledge, time, experience and resources, could probably bring up much more things.