Physics and Free Software
There’s often the ‘security vs. convenience’ tradeoff, but for most people you have both sides with Bitwarden over KeePass.
Bitwarden is undoubtedly more convenient. If you can create an account, you can use it. I have a family account, and have both of my parents using it. The love it now, but given the friction to get them there in the first place, it would impossible to get them on KeePass. Especially because they wanted their passwords on all devices.
Regardless of using Vaultwarden or KeePass, you need to have quite a bit of expertise to self host. And you are trusting your own ability to secure your attack surface. I’m sure many if not most in this thread can, but it would take me quite a while to convince myself I have. I would much rather trust security professionals.
Somewhat, although, potentially related. Have you seen Bitwarden’s git repos? It is immaculately organized.
Consistent, clear naming convention. There is literally one called ‘self-host’. If you put that much effort into keeping your code that useable/available/auditable etc. Oh yea. I’m going to trust you to handle security for me
This is my biggest issue too. In the ideal situation, I “trust” my bank. What I have an issue with is whenever I buy something it becomes part of the “public space” of data brokers. Maybe they only trade information on what my breakfast cereal of choice is. More (most definitely) likely is that everything I buy is there for any third party to see
When you say billions of hours, I would keep things in perspective. AI and storage aren’t free. They’ll only save the important stuff. The solution to saving yourself, us, and all of humanity is to never do anything important or useful. So the good news is if we go back to work and slack off as we’ve always done, we’ll outsmart them and save us all!
We all have a fundamental right to privacy, which is constantly violated. Not just on a daily basis, but on a minute by minute basis.
But to play devil’s advocate for a moment to assuage some FUD around posts like this, how many of the absurd amount of cookies overlap in otherwise innoculous ways. For instance, product tracking cookies. Say you bought a pumpkin on Amazon, and that drops a gorde cookie, a pumpkin spice cookie, a cornucopia cookie etc.
That’s certainly not the same as buy a pumpkin, track your location around the nearest pumpkin patch, read your grandma’s emails about pumpkins, and collect information to determine your likelihood of buying another pumpkin based on your sexual orientation.
The latter certainly exists, but does anyone know much about the former? How prevalent would they be in that 850?
My sell on password managers is quality of life. You never have to reset your passwords and you can use a hotkey to enter it faster than typing. Gone are the days of fat fingers.
But I get where people have an issue. It’s one point of failure vs. many, but they don’t realize It’s easier to well secure the one than it is to not spread the same vulnerability everywhere.
As Kramer said. Levels. If tou layer your security 2 becomes a non issue. What you have, what you know, and who you are. Which plays into 1. The 3-2-1 of backup. 3 copies of the data. 2 different media. At least 1 off site. Suprising as it might be, writing a great backup is to write your password down. I have a piece of paper with my password in a lock box in my apartment, in a safety deposit box at my bank, and at my parent’s house
https://backlinko.com/ad-blockers-users
If you search ‘percentage of people who use ad blockers’ on ddg you find the same thing on several sites. I found it unbelievable too, but given multiple sites, I’ll take it at face value. I don’t have time to deep dive everything. Let me know if you find anything to the contrary.
Ad blocker is a terrible misnomer. Go to ublock’s github and read the README. Ublock’s primary purpose is to protect your right to privacy. Blocking ads is a consequence.
That given, your question could be reframed as “I don’t have spyware and my friends do. Should I tell them how to protect themselves at the risk of being spied on again?” An ethical dilemma where only a coward makes the wrong choice.
As nice as an idea as it is, it will never be feesible for one reason: buy in. You would have to get everyone on youtube to migrate to the same platform. Just about everyone who uses windows has gripes about it, but the masses don’t migrate to Linux. Because it is change at all, and there are too many choices. I like anyone else here, would love for folks to even consider an alternative, it’s a losing battle against human nature.
/e/os?