If you’re looking for a privacy respecting paid service that’s not just a file locker for pirates I have two recommendations: At a previous workplace, we used LiquidFiles. More catered for commercial uses.
Personally I’ve been using Bitwarden Send. Requires a paid account ($10/year) and limited to 500MB files.
lol you probably would have gotten away with it if you just used China’s history as another example of empire. But singling out ‘Han culture’ as the problem makes you look like a bigot. Especially when your example is from the Qing Dynasty, that was ruled by Manchus people, not Han.
It’s called secure boot and it’s been around for over 10 years now.
Software passkeys can’t provide attestation and don’t. A service requiring it would reject every apple and google device too. Its a feature for hardware like yubikeys and smart cards used by governments to ensure it’s not a knockoff with backdoors.
No thats actually not an issue at all if your device is secure and uses full disk encryption.
Oh I see your computer is secure well then nothing to worry about 🤣
If i want to write down my private key on a piece of paper and type it in by hand then thats my issue to deal with and not theirs.
With a hardware FIDO2 key, the private key never leaves the device, instead it signs challenges. Malware on the PC can’t access the private key and make it’s own copy.
Using software keys, they are at least encrypted in the vault until you open it, then there’ll be a window of time with a plain copy in memory that malware can potentially grab.
Your plaintext private key file can be stolen by malware easily and immediately. You would actually be better off with it written on a post it note.
Course in real life malware is gonna be stealing your browser cookies to gain access to your accounts and avoid the whole keypass thing. In the world that FIDO was born, authentication is happening all the time and any possibility of key theft is considered a compromise.
I wanted to be sympathetic to the author. Passkeys are complicated, especially since they now try to cover so many situations, and it certainly originates from the corporate world. But this guy is spreading FUD. Tim Cappalli pointing out security shortcomings in keepassxc’s implementation a couple of times is not proof that FIDO Alliance is anti open source.
Does it exist anymore? iTunes went DRM free in 2009. Bandcamp is DRM free. Even streaming services can be readily downloaded from with alternative clients. Who’s still selling DRM’d music?