Gives me hope for a proton drive app. As soon as that's available and viable I'll be able to drop my mega subscription.
this post was submitted on 06 Jun 2024
250 points (96.6% liked)
Linux
47361 readers
1194 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
If it's as bad as their VPN app for Linux hard pass.
Just use wireguard directly, no need for an app
I do use wireguard. Mostly because the proton app for linux is so bad.
Look into how they have you setup port forwarding on linux using the official app. They want you to open a terminal and keep a looped script running as long as you are using it.
Not only that but when I was testing it the script would start erroring out after about 5 min requiring a restart.
I know, I use port forwarding. I simply improved the script for my needs and put it in a systemd service. It's been working well for some time now.
Also, most other providers don't allow port forwarding at all. Proton is being nice here.
Right you can use a custom script as a service to make it do what it's supposed to do. but for an app that's for an advertised feature of a paid service it's a complete shit show.
It's a described feature of a paid service though, so it goes a bit beyond just being nice. More importantly for me, the app also leaks memory insanely, at least in the latest Debian build. I spun up a Windows vm with ProtonVPN because the Linux experience (which, again, I pay for) was too frustrating
I'll stick with KeePassXC but I'm still very happy to see them remembering about Linux. I hope Drive will be next, this is something I'm really waiting for.
non free
I'm very skeptical about online cloud-based password managers. I don't trust that at all. I still prefer to use a local off-line password manager like KeePassXC.
I'm using both. Mainly I use KeepassXC for most stuff (including my Proton account) because aside from the other security things it offers (like encrypting the database with a keyfile and challenge response), it also gives me a choice to add files into my password entry
I just use Proton Pass because of its easier access to email aliasing and occasionally sharing of sensitive data by sharing them a separate vault
Same here, I use both KeePassXC and Bitwarden. But I dont store heavily sensitive passwords on Bitwarden, like my email passwords, encryption retrieval keys, etc.
Since the vault is end-to-end encrypted, it shouldn’t matter where it is hosted, even if it is in the cloud. Here is what a security researcher and a password cracker Jeremy M. Gosney has said about this after the LastPass incident.
”Is the cloud the problem? No. The vast majority of issues LastPass has had have nothing to do with the fact that it is a cloud-based solution. Further, consider the fact that the threat model for a cloud-based password management solution should *start* with the vault being compromised. In fact, if password management is done correctly, I should be able to host my vault anywhere, even openly downloadable (open S3 bucket, unauthenticated HTTPS, etc.) without concern. I wouldn't do that, of course, but the point is the vault should be just that -- a vault, not a lockbox.”
What is your threatmodel here?
The problem for me with completely self hosting it is that it'll be relatively hard to get my backup, availability and sync requirements satisfied without a lot of effort.
Whereas I trust encryption in theory enough to hand my encrypted data to anyone. If the implementation is properly audited then I also trust that.
Most of my passwords are for accounts with 2fa anyway so even if both the storage leak and the encryption turn out to be subpar my threatmodel is still not violated.
If self-hosting makes you feel better about it, Vaultwarden exists for the Bitwarden client.
Damn, I thought for some unknown ungodly reason Valve implemented something like game pass for Proton.
Shhhhh, don't give them ideas!
view more: next ›