• 1 Post
  • 96 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle






  • LastPass doesn’t have your password, so it can’t be stolen during a breach.

    But 1Password goes a step further, also requiring a “secret key”, which also can’t be stolen.

    https://support.1password.com/secret-key-security/

    Even if an attacker manages to steal your encrypted data from 1Password and also guess your master password, they still can’t access your data without a secret key.

    For that reason, your 1Password account is more likely to compromised through your own device, not their server. And if your own devices are thoroughly compromised, no password manager can save you— the attacker can potentially grab all you type and see all you see.










  • You use an IMAP syncer, like this one:

    http://www.offlineimap.org/

    A word of caution: I professionally hosted email for over a decade.

    90% or incoming email will be spam. Anti-spam tools will need regular updates. Backups are also super important.

    All things considered, I don’t host my own email anymore although I know all the pieces involved.

    There are also some independent email hosts that are good like Fastmail or for extra privacy, Proton Mail.



  • There aren’t log visualizers for every artisanal log file format. But there’s a movement towards supporting JSON format logs for more services, and lots tools that can understand JSON logs making generating graphs and metrics from arbitrary logs fairly efficient.

    If this tool is making the logs harder to parse by using a custom format, that’s something the tool could improve.

    Some apps support both plaintext logs for humans and JSON logs for tools.