Leaving python-dev behind

Posted Jul 31, 2022 18:18 UTC (Sun) by mathstuf (subscriber, #69389)
In reply to: Leaving python-dev behind by Wol
Parent article: Leaving python-dev behind

In this day and age, password managers also remember these kinds of details…

Leaving python-dev behind

Posted Jul 31, 2022 19:08 UTC (Sun) by mmirate (guest, #143985) [Link] (7 responses)

No password manager is both trustworthy and user-friendly.

By the latter I don't just mean "newbs can understand it" I also mean "the time needed to log in, compared to memorizing and manually-typing the password, is similar or less" - inconvenient security measures become unused security measures.

Bitwarden is about as user-friendly as it gets, and it's about as close to trustworthy as it could possibly be for something that runs on other people's computers. So close yet so far.

Leaving python-dev behind

Posted Aug 1, 2022 13:34 UTC (Mon) by mathstuf (subscriber, #69389) [Link]

> "the time needed to log in, compared to memorizing and manually-typing the password, is similar or less"

My passwords are 80+ characters (as long as it's accepted :/ ), so the password manager is faster :) .

> Bitwarden is about as user-friendly as it gets, and it's about as close to trustworthy as it could possibly be for something that runs on other people's computers.

I just have WebDAV access hooked up where needed for my keepass database. Works well enough for me. But I also know I'm not "everyone".

Leaving python-dev behind

Posted Aug 1, 2022 16:33 UTC (Mon) by kleptog (subscriber, #1183) [Link] (5 responses)

Keepass is quite fast. Ctrl-Shift-A, Enter, sufficient to log into most sites.

Unless there's something else that disqualifies it for you?

Leaving python-dev behind

Posted Aug 1, 2022 17:11 UTC (Mon) by mmirate (guest, #143985) [Link] (4 responses)

Ctrl-Shift-A is useful for desktop programs but, last I checked, it is very brittle at distinguishing websites from one another. And the Keepass material - being a single monolithic file - requires great effort to correctly synchronize among multiple computers, let alone adding a smartphone into the mix. Finally, KeyPass does not peer deeply enough into websites (not that I'd expect desktop apps to allow such scrutiny) to automatically create new entries when I sign up for something.

Leaving python-dev behind

Posted Aug 1, 2022 18:16 UTC (Mon) by mbunkus (subscriber, #87248) [Link] (2 responses)

I've been using KeePassXC with a database file synced between four Linux, one Windows PCs and one Android phone using Syncthing. Not a single problem with database corruption, out-of-date database files etc.

This setup is surely not for everyone. I'm very happy with it, though.

Leaving python-dev behind

Posted Aug 1, 2022 22:26 UTC (Mon) by mathstuf (subscriber, #69389) [Link] (1 responses)

The way I do it is that it is effectively read-only from the primary consumers. The "master" one lives on a USB key and I just manually copy it to the DAV store when I update it. Works for me; I just don't sign up for accounts on the mobile device but that probably doesn't work for everyone.

As for "ctrl+shift+a", that instead invokes a Firefox add-on instead of some desktop-global shortcut. It has enough information to be accurate about the website at least.

Leaving python-dev behind

Posted Aug 2, 2022 1:31 UTC (Tue) by edgewood (subscriber, #1123) [Link]

I also use Syncthing, but unlike the other poster, do get sync conflicts. But the Keepass db format keeps track of modification times for each record, such that "Merge another database" has never lost information for me. I can make changes with abandon on my Android phone and tablet and multiple desktops, knowing that worst case I'll need to merge.

Leaving python-dev behind

Posted Aug 4, 2022 8:41 UTC (Thu) by cortana (subscriber, #24596) [Link]

KeePassXC has great support for merging multiple versions of databases built in anyway - if you do have a conflict, you can merge one database into the other and it takes the latest passwords from both.