Set Immich up a couple weeks ago and I’m surprised how good it is. Their docs included a simple cli tool to bulk import all my Google photos. Mobile app is working great. I’m really impressed with the search too.

I’ve never really had a use case for it myself. I’m happy using Bitwarden at present. It’s certainly a fun read and a good solution for anyone in need of a completely offline solution.

I really like how easy it is to customise it so that even if someone got a copy of your square, they wouldn’t necessarily be able to get your passwords. Changing your starting row or column or adding a few characters at the start of the domain will completely change the output. I’d imagine you’d need both the square and multiple passwords to even attempt to brute force a solution back out of it.

This feels like a weaker version of GRC’s Off The Grid system. https://www.grc.com/offthegrid.htm

It doesn’t require you to remember something different per website. It’s designed so that you can turn any site name (E.g. Amazon) into a secure password which is unique to you. If you really need a completely offline solution, I don’t think it gets too much better than that.

In that case Proton wouldn’t be providing the data, the user would be. Proton can’t provide what they don’t have.

That doesn’t hold up against the publicly available source code for their applications, white papers on their security and encryption, and multiple independent security reviews. And again, they are legally required to ignore US court orders. Only a Swiss court order can compel them to provide user information.

Got a source for that? Proton isn’t able to access to any user emails. I believe Swiss law also makes it illegal for them to provide user information without a (Swiss) court order.

The only case I’ve heard of that was similar was when the Swiss court ordered them to provide all the info they had on a user. This was the last IP address they logged on from and a recovery email the user had entered. The recovery email is an optional thing the user had set up on their account. They also used this same email address to sign up for a Twitter account. They were able to get enough data from Twitter to identify the person.

Yeah, I had one of the earlier ones Yubikeys without NFC. I remember having to get a USB mini to full USB converter and plug it into that to login to things like LastPass. Thankfully I only needed to do it once for the initial login.

Yubikey and other hardware security keys now support NFC which makes the mobile support really good. A quick tap to the back of the phone and you’re done.

I second this. Especially useful as you could be following an exact or similarly named community and not notice it’s on a different instance.

One thing to note is that SimpleLgoin (haven’t used AnonDady) is that it can generate different kinds of aliases.

One option allows you to specify the part of the email before the @. These will all use a common randomly generated sub domain. As these subdomains are assigned to individual users, you can correlate two aliases to the same user. It’s probably not picked us as easily as an exact match, but far from impossible.

Simple login does have the option to generate completely random emails which don’t use a common subdomain. This mixes your usage with every other user of the service.

They semi-recently bought Simple Login which you can provide with your own domain. That does allow you to create unlimited addresses and they’ll all be forwarded to the inbox of your choice. Can also disable any addresses when you no longer want them.