• 0 Posts
  • 21 Comments
Joined 2 months ago
cake
Cake day: June 4th, 2025

help-circle
  • LastPass’s biggest problem was that they were almost the first in the game, and mistakes/choices they made 20 years ago bit them hard when they got hacked.

    There were two major issues with LastPass’s security model:

    1. Non-Password data wasn’t encrypted. So usernames and urls were visible by the people who stole the vaults.
    2. Passwords were encrypted with a number of iterations based on when the account was created, so older accounts were only run through a single iteration. The iteration process makes it much harder to guess the master password(by making it take a longer time). So single iteration makes it pretty quick to guess the password.

    So with flaw 1 you could see what vaults might have valuable passwords like banks and crypto wallets. And with flaw 2 you could reasonably quickly break into the vaults of long time users.

    So aside from their lax security allowing the compromise to happen in the first place (Nothing is fool proof), they weren’t providing the level of protection most people assumed.

    More modern password managers like BitWarden fixed those problem a long time ago.




  • As others have mentioned, the websites tend to be limited both by resolution and functionality.

    My TV supports CEC(most do these days) which will pass the remote input onto the devices connected to it, like a computer. Which means with Plasma Big Picture I can navigate with my remote, and any app that supports navigation with simple arrow key input would work great.

    Unfortunately, the streaming websites, last time I tried, absolutely suck at that and assume you are navigating with a mouse.








  • There’s nothing saying you can’t have ports forwarded for the NAS, and have a VPN for everything else. Censorship may be a problem, but those more often block VPN services like NordVPN, not protocols. So running your own is less likely to be stopped. That said, of course comply with local laws, I don’t know where you live or what’s legal there.

    If you really want multiple things exposed at the same time, you have two options(which can be used in combination if needed/wanted):

    1. A reverse proxy. I use caddy. I give it a config file that says what address and port binds to what hostname, and I forward port 443/80 to it. That works great for web content.
    2. Use custom ports for everything. I saw someone else walking you through that. It works, but is a little harder to remember, so good notes will be important.

    I still recommend against forwarding a lot of ports as a beginner. It’s very common for software and web apps to have security vulnerabilities, and unless you are really on top of it, you could get hit. Not only does that put all your internal devices at risk, not just the one that was original breached, it also will likely become part of a botnet, so your local devices will be used to attack other people. I’d recommend getting confident with your ability to maintain your services and hardening your environment first.





  • There are two major advantages to what Nintendo did. The plastic top significantly increases shatter resistance. Look at Jerryrig Everything’s review to see, it’s almost impossible to break the screen now via blunt force, which is a big problem for people with kids. Surface scratches are far better than a shattered screen.

    The second advantage is that you can put a glass screen protector on it and get the best of both worlds. A replaceable glass surface that is nice and hard. What I think would have made it better is if the console came with a pre-installed glass protector that was replaceable.


  • The emoji thing is built into the keyboard, but it doesn’t do like on-device generation or anything. They just have a list of pre-made(maybe AI generated) combos. I’m guessing they are AI generating them, then having humans approve it, before including it in the keyboard emoji list. It’s kinda neat, in that it expands the options, but really not much. Overall the OS really feels the same. I haven’t looked forward to an Android update in many years.

    Also, as someone who doesn’t use Google’s launcher or keyboard, yeah, I get almost none of these features.