I could be wrong, but I think Qualcomm designs its own chips and only licenses the “API”, so it would be no difference for them.

I use KeePassXC’s browser integration daily and it works pretty well with Firefox (linux), well enough that I’m not complaining, but I cannot compare it with Bitwarden cause I never used it. On Android I use Keepass2Android and works well with autofill, but again, I can’t really compare it.

Something tells me Bitwarden works better, just by virtue of being a commercially supported product, but I have no complaints with KeePassXC & Keepass2Android (KeePassDX works well on android too). Original KeePass desktop client was never great though.

I see, that makes sense and should be more secure, in theory. Thanks for the explanation.

The issue I have is, whether I need to trust a third party with my private key, e.g. Google with Android, Microsoft with Windows, etc. (yes on linux it’s different, but that’s not my only OS).

Also if the private key does get compromised (e.g. local malware steals it), hopefully there’s an easy way to revoke it.

Ok, from a quick search, it seems passkeys rely on some trusted entity (your browser, OS, …) to authenticate you, so, yeah, I’m not sure if I like that. The FIDO alliance website is all about how easy, convenient and secure passkeys are, and nothing about how they actually work under the hood, which is another red flag for me.

I’ll stick to old-fashioned, long, secure, randomly generated passwords, thanks.

From a quick search, Keepass2Android doesn’t have it, not clear if they’re working on it: https://github.com/PhilippC/keepass2android/issues/2099

KeePassDX similarly has an open issue, not clear when/if it will be implemented: https://github.com/Kunzisoft/KeePassDX/issues/1421

Good to know about Strongbox on iOS, though I’m on android so no bueno for me.

I don’t use passkeys so I don’t know. Maybe I should research into passkeys, what’s the benefit over plain old (long, randomly generated) passwords?

+1 For KeePassXC and the KeePass ecosystem. Yes, you need to sync the database yourself, but you can use any file sharing service you like, e.g. google drive, dropbox… or selfhost something like nextcloud (like I do), which for me is actually a point in its favor.

Based on this news, I think I made the right choice back then when I decided to go with KeePass.

What do you mean “no cross device support”? KeePassXC supports Win, Mac, Linux and there are iOS and Android apps available…

As for the lack of cloud and requirement to provide your own synchronization, for some (like me) that’s a feature, not a limitation :)

Me too, I had money. Then, Trump imposed tariffs on China which made my stock take a dive, and the company I used to work for suffered, meaning fewer raises or bonuses. Not saying tariffs were 100% a bad idea, China was, and is still, stealing our tech (observed first hand while at that job), but that didn’t help with the economy.

Then we had covid, which didn’t help, and Trump definitely mismanaged that. Biden then took over and … also mismanaged, but the opposite way, causing inflation. Thankfully, they brought it back under control, where we are now.

Now I have a new job and more money is flowing. And honestly, most of this is neither president’s fault or merit, really, they just like to point fingers and take credits for stuff they didn’t do.

If that was the issue, they’d take steps to ensure safety, ask for certifications, etc. rather than more tariffs and lower “de minimis” exemption. Clearly these decisions are made for economic reasons, not to ensure higher quality products and protect consumers.

If I understand correctly, nextcloud automatically updated … which I didn’t think it would, normally. Maybe it’s a “feature” of the AIO docker image?

Never upgrade to the latest and greatest of … anything really, especially in production. Let others test it first, or as suggested already, have a staging environment where you test the upgrade first. I guess you can still downgrade nextcloud though, especially if you have a backup.

Are you using the AIO image? I don’t know how well that works, but yeah, I absolutely hate automatic updates like that. I tried it once and I decided to use the plain “official but not supported” docker image instead, where I manage things myself. Never had an issue, and I can control which version I’m running, I can backup to wherever I want, using whichever system I want, etc.

Does a bike helmet count?

If I have to guess, because nobody but a racist party like the league would do such a thing, so it’s a pretty important detail. Then again, I agree it should specify “emphasis mine” or something…

And never mind that noise you heard

Which ones stand a chance of actually winning?

The “other” candidate promised to do even worse … so pick your poison. No good choices, only least bad ones.

… and execution speed is faster. And they’re both open source. I mean, good thing we have choices, right?

Sure, once you have root on the host system you can pretty much do whatever you want … adding entries to udev isn’t anything revolutionary.

There are parts of the world where it is a function of age, or at least of the number of years you’ve been working, because the government will pay you a pension after you worked and paid taxes this many years.