Notices by Louzao/SoyDelBierzo :uv: (louzao@masto.louzao.network)

@aab I use it to store files like ED25519 private keys, TOTP passwords and secure sharing passwords, or files with my partner.

I have a local instance running inside a LXC container on a Proxmox server, with daily backups stored on a Cryptomator container in a public cloud.

Client app uses local copy of data in mobile/tablet, only needs server access to add new sites.

Reading Lastpass data leakage, I noticed this:

"The threat actor was also able to copy a backup of customer vault data from the encrypted storage container, which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs"

If you're a Lastpass user, attackers now have your personal data, and the websites where you have an account.

Expect targeted phishing campaings.

https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

Time to migrate to @bitwarden

It's opensource, encrypts everything, you can run your own server, free for personal use, $10 yearly Premium account...

https://bitwarden.com/

@glaber @bitwarden I used it time ago, finally move to local Bitwarden instance only accesible from my network