• 0 Posts
  • 44 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle
  • You can’t have it both ways. It’s hard enough to get people to switch to signal, or least also use it next to other messengers. Now imagine they’d have to connect to multiple servers to talk to multiple people. Possibly everyone connection details. Even if that’s done in the background, you have to somehow get the connection registered once, discovered if you will.

    Anything and everything you send through their server is end-to-end encrypted. Some people hate on the phone number being required to create an account, but it’s also the reason it works at all: anyone in your contacts who also has signal you can talk to. Phone numbers are an international standard. If course this also has downsides…

    Finally what you’re asking for exists. NextCloud has “talk”. Which is essentially a messenger app, it’s built in. Go use it. I have a NextCloud instance and I don’t use it either. What’s the point of having an app I can only use to talk with people so close to me that they’re in my NextCloud with an account already?







  • Self hosting BitWarden still means it’s accessbile for them and/or from them. You also have no way to audit their security from what I understand. VaultWarden is FOSS, if you want to, you can go check. And it does get checked by people with the competence to check this do every now and then. [Edit: I forgot that BitWarden is actually souce-available as well, while not being FOSS that’s still better than most solutions]. I just prefer full FOSS whenever possible. I prefer it not be a black bos I just happen to run on my own server.

    If you self host VaultWarden, the instance can just be not accessible from the internet, and only from behing a VPN. Obviously this is inherently much safer. If that’s possible with the self-host option I don’t know, but even just for licensing the local instance will have to be able to reach their servers (possibly be reachable from their servers, too). I did see they got an “offline deployment” option for air-gapped servers, but haven’t looked into what limitations that entails.

    Additionally, you’re still within their licensing model. So for certain features you need to have a not-free account (like even just more than 2 people).

    And like others said, VaultWarden is much lighter on resources in general and you aren’t limited in what you can and can’t do (users, collecitons, auth-options, …).


  • Your first point is debatable. You still have to trust them to be that secure, and you can’t verify that. If they are ever breached, it’s literally the worst case scenario. You can self-host their solution, but only in the enterprise tier (6$ per user per month). Also BitWarden is a target woth attacking, I am not. BitWarden hosts thousands of instances worthy of being attacked individually. A personal VaultWarden instance of “Mike and Molly Peterson” isn’t exactly an attractive target. I do think they are pretty secure, but a single mistake with these stakes can have immense consequences. LastPass was also breached repeatedly, with a similar buiseness model.

    The second point about electricity wouldn’t be true in my particular case, as the server for self-hosting it is running anyway. Running VaultWarden or not doesn’t change the power usage noticably. Obviously this is different for someone who doesn’t just have a server at home running anyway.

    Side note: I’m not actually running a personal VaultWarden instance, as my personal requirements are being met just fine with KeePass files. We do run an instance at work, but it isn’t world-accessible (internal access only).



  • the form factor is easy to get around

    Why did you just ignore everything I wrote, but you still replied to me? No, it isn’t easy to get around. You can use a server to game, but the server mainboards and CPUs expect and work with differently configured memory (registered DIMMs). All the AI infratructure uses that type. You can’t use that memory in a normal PC. Wikipedia reference if you’d like to read about it, but a relevant quote:

    […] the motherboard must match the memory type; as a result, registered memory will not work in a motherboard not designed for it, and vice versa.

    You would have to un-solder all the chips and remanufacture new memory modules, and nobody is doing that, especially not at scale. It might be an actual buisness model to do that once the bubble pops, but it isn’t a problem that’s “easy to get around”.>











  • CachyOS is basically vanilla Arch, from a resource point of view. They have their own repos, but they just mirror the arch repos. The arch wiki fully applies. For the very few special things, there is documentation (basically a few notes on gaming related performance options).

    So why use it? Carter it’s trivial to install, and everything you need is preconfigured to just work with sane defaults. Installing it is like Mint or Ubuntu. But it uses optimized repos according to your available CPU instruction set, and optimized proton and wine (their own). Games just work (even more so than they already do generally), and are faster. Programs are faster (where it matters). But you don’t need to do anything for that, it’s just there by default.