XMPP/Jabber: fireshell[at]linux[dot]monster

OTR fingerprints: C47CFCDC D9F67D17 4C08AA1A C2500250 AB361153

Matrix/Element: [at]fireshell:matrix[dot]hostux[dot]net

IRC: fireshell[at]libera[dot]chat

OTR fingerprints 1A66175C 7E713B1E 6D15079 87FB1952 C6866E05

  • 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle
  • Some no-name came and without any problems asked to become a maintainer in a project used in almost any distro, took it over, put a backdoor in there and no one had any questions? In this case, everything turned out thanks to pure chance. Noname screwed up his backdoor, which attracted the attention of a guy from Microsoft, and out of boredom, he dug up what was what. And if I hadn’t messed up, or that guy from Microsoft decided to go drink beer instead of poking around in the xz code, then no one would have discovered anything. It’s scary to imagine how many of these nonames are sitting in all these thousands of open source projects, waiting in the wings to roll out a malicious patch.









  • I’m currently using KeePassXC. The setup that I created below gives me 3-backups of my passwords, but it’s a bit to manage.

    Computer

    On my computer, I have my keepassxc database and key file stored in a veracrypt container. Next to my computer, I have a piece of paper that has the password for my keepassxc database and the password for my veracrypt container.

    computer -> veracrypt container -> keepassxc database AND keepassxc key file

    paper -> keepassxc database pw AND veracrypt pw

    KeePassXC Export File (text file that contains all of my login information)

    I store this file inside of a veracrypt container, on my USB LUKS. Next to my USB LUKS, I have a piece of paper that has the associated veracrypt password.

    usb luks -> veracrypt container -> keepassxc export file

    paper -> veracrypt pw

    Cloud

    I store my database in cloud service a.

    I store my key file in a veracrypt container, in cloud service b.

    On a piece of paper, I have the login information to both of these cloud accounts and the password for the veracrypt container.