3 ms·
honestly to me this falls into the category of LARP security. the entire point of encryption is to move sensitive data across adversarial channels. Meaning, if
by Barrin92 4y ago
honestly to me this falls into the category of LARP security. the entire point of encryption is to move sensitive data across adversarial channels. Meaning, if you trust Bitwarden enough to use it at all there's no benefit to not just using their servers (you keep a local copy of your data anyway).
If you want to keep your data secure by keeping them on you, just use a notebook. Cheaper than this and works without a power chord.
- Karunamon 4y agoIt not so much that I do not trust the company today, it is that I do not trust them to not silently become adversarial in the future when the government comes knocking or if they get bought out, or whatever. This is a bit of attack surface that all hosted cloud solutions share, and it is one that it has never been easier to eliminate.
- Barrin92 4y agoall of these password managers (including bitwarden) encrypt your data end-to-end and nothing ever leaves your client in a plain state so regardless of who has the backend your data is never touchable. You always only ever need to trust the client, which you do here as well.
- Karunamon 4y agoThe client is made by the same people at the end of the day, so that is of little comfort. Also, adversarial does not refer to just possibly breaking encryption, it also applies to daily continuity. I trust my ability to keep a small encrypted password database safe more than I trust some random companies to get bought or change their business model and suddenly I have to decide between a massive Flag Day or paying for something I did not have to before or having some kind of other unwelcome limitation placed on me. I like controlling my own destiny, thank you very much.