Search

Uh...

Enpass is a freemium password manager and

From wikipedia.

So you switched to a proprietary password manager?

Also:

The Enpass app retains no user data on its company servers,[6][7] instead storing and syncing encrypted password vaults on storage controlled by the end user.

How is this different than keepass/xc, a fully foss solution?

Best to switch to Firefox anyways, or even better privacy enhanced LibreWolf

This project is a custom and independent version of Firefox, with the primary goals of privacy, security and user freedom. LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements. This is achieved through our privacy and security oriented settings and patches. LibreWolf also aims to remove all the telemetry, data collection and annoyances, as well as disabling anti-freedom features like DRM.

Don't let your dreams be dreams, friend.

Github: Windows XP All Editions Universal Product Keys Collection

There have also been some concerns about Playtron being a crypto/web3 project. While the first partner to ship Playtron powered devices, Sui, is a web3 company, Playtron itself is not. It’s a vendor neutral solution to anyone who wishes to make Linux powered game consoles whether it’s a web3 company, a hardware manufacturer or just someone who wants to re-purpose an old build as a living room console.

Because he says they talked about crypto I had to go through to see what it was talking about. But it wasn't dumb.

@Strit Happy Birthday :-)

@Strit Happy Birthday :-)

@Strit Happy Birthday :-)

I keep it installed for the odd site that requires it and because Firefox still doesn't support WebSerial.

The comment about waiting until there's twitter drama to fix something is spot on. It took them a few days to fix this and it could've saved them the bad publicity for such an obvious fix.

Others have been asking for a password prompt for years too. Using the local keychain is good, though a user-defined password is a good option too. However, many people have terrible opsec and would probably opt for horribly weak passwords.

At least something has finally been done.

Anti Commercial-AI license

This is the best summary I could come up with:

More than 1.5 million email servers are vulnerable to attacks that can deliver executable attachments to user accounts, security researchers said.

Tracked as CVE-2024-39929 and carrying a severity rating of 9.1 out of 10, the vulnerability makes it trivial for threat actors to bypass protections that normally prevent the sending of attachments that install apps or execute code.

“I can confirm this bug,” Exim project team member Heiko Schlittermann wrote on a bug-tracking site.

More than 1.5 million of the Exim servers, or roughly 31 percent, are running a vulnerable version of the open source mail app.

Threat actors can exploit it to bypass extension blocking and deliver executable attachments in emails sent to end users.

Given the requirement that end users must click on an attached executable for the attack to work, this Exim vulnerability isn’t as serious as the one that was exploited starting in 2019.

The original article contains 294 words, the summary contains 148 words. Saved 50%. I'm a bot and I'm open source!

@leo Well, which one doesn't at this rate... Still waiting on OpenRecall to actually do something about encrypting its internal memory in some way.

This is the best summary I could come up with:

OpenAI announced its Mac desktop app for ChatGPT with a lot of fanfare a few weeks ago, but it turns out it had a rather serious security issue: user chats were stored in plain text, where any bad actor could find them if they gained access to your machine.

As Threads user Pedro José Pereira Vieito noted earlier this week, "the OpenAI ChatGPT app on macOS is not sandboxed and stores all the conversations in plain-text in a non-protected location," meaning "any other running app / process / malware can read all your ChatGPT conversations without any permission prompt."

OpenAI chose to opt-out of the sandbox and store the conversations in plain text in a non-protected location, disabling all of these built-in defenses.

OpenAI has now updated the app, and the local chats are now encrypted, though they are still not sandboxed.

It's not a great look for OpenAI, which recently entered into a partnership with Apple to offer chat bot services built into Siri queries in Apple operating systems.

Apple detailed some of the security around those queries at WWDC last month, though, and they're more stringent than what OpenAI did (or to be more precise, didn't do) with its Mac app, which is a separate initiative from the partnership.

The original article contains 291 words, the summary contains 211 words. Saved 27%. I'm a bot and I'm open source!

This is the best summary I could come up with:

We’ve spent the past week and a half testing seven Copilot Plus PCs, representing all four Snapdragon X chips, against a slate of similar laptops running Apple Silicon, Intel Core Ultra, and AMD Ryzen processors.

Microsoft automatically enables Auto SR (its own version of Nvidia’s DLSS or AMD’s FSR, which increase frame rates by dropping the in-game resolution and then upscaling with AI) on a short list of games, which includes The Witcher 3 and Control.

In other games that are supposed to be optimized for Windows on Arm, like Control and Borderlands 3, turning on ASR degraded the visual quality with distracting flickering lines on or around fine details like mesh screens and hair.

In Tom’s testing, the Microsoft Surface Laptop with the Snapdragon X Plus CPU lasted about seven hours with the brightness set to 100 percent while being pushed with all sorts of tasks like downloading games from Steam and taking video calls.

They feature nearly everything most other laptops in that price range do: beautiful OLED displays; high storage capacity; long battery life; fast processors; metal chassis; and in some cases, the latest Wi-Fi 7 adapter.

And now that every major Windows laptop manufacturer has at least one Snapdragon X-based machine, there should finally be enough of an install base to entice developers at large to create native Arm64 versions of their apps, which will make these an easier sell.

The original article contains 2,946 words, the summary contains 234 words. Saved 92%. I'm a bot and I'm open source!

This is the best summary I could come up with:

As part of the memory management changes expected to be merged for the upcoming Linux 6.11 cycle is allowing more fine-tuned control over the swappiness setting used to determine how aggressively pages are swapped out of physical system memory and into the on-disk swap space.

This effectively allows more finer-grained control over the swapiness behavior without overriding the global swappiness setting.

Dan Schatzberg of Meta explains in the patch adding swappiness= support to memory.reclaim: Allow proactive reclaimers to submit an additional swappiness=[val] argument to memory.reclaim.

However, proactive reclaim runs continuously and so its impact on SSD write endurance is more significant.

Therefore, it's desireable to have proactive reclaim reduce or stop swap-out before the threshold at which OOM killing occurs.

This has been in production for nearly two years and has addressed our needs to control proactive vs reactive reclaim behavior but is still not ideal for a number of reasons:

The original article contains 474 words, the summary contains 151 words. Saved 68%. I'm a bot and I'm open source!

This is the best summary I could come up with:

The Raspberry Pi Foundation has released Raspberry Pi OS 2024-07-04 as the newest update to this default operating system for Raspberry Pi ARM single board computers.

Raspberry Pi OS 2024-07-04 continues defaulting to Wayfire as the default Wayland compositor for the desktop with this operating system.

However, now through the raspi-config configuration utility is also the labwc stacking Wayland compositor for those preferring that instead or just wanting to try something different from Wayfire.

Wayfire meanwhile has seen a number of fixes in this Raspberry Pi OS update.

Also on the Wayland side, WayVNC for VNC support under Wayland has improved encryption support and better handling of virtual displays.

This Raspberry Pi OS update moves to using the Linux 6.6.31 kernel plus brings other package updates such as Google Chromium 125 and Firefox 126 plus the newest Raspberry Pi firmware.

The original article contains 199 words, the summary contains 140 words. Saved 30%. I'm a bot and I'm open source!

This is the best summary I could come up with:

Qualys went public today with a security vulnerability they have discovered within the OpenSSH server that could lead to remote, unauthenticated code execution.

OpenSSH servers running with the GNU C Library (glibc) in Linux environments are vulnerable to CVE-2024-6387, or the vulnerability they have dubbed "RegreSSHion" as a play on "SSH" and "regression".

A signal handler race condition within the OpenSSH server could lead to unauthenticated remote code execution.

Various versions of OpenSSH going back years are affected on Linux.

Qualys noted in their research: "This vulnerability, if exploited, could lead to full system compromise where an attacker can execute arbitrary code with the highest privileges, resulting in a complete system takeover, installation of malware, data manipulation, and the creation of backdoors for persistent access.

More details on CVE-2024-6387 as this severe OpenSSH security vulnerability for Linux servers can be found via the Qualys blog.

The original article contains 170 words, the summary contains 145 words. Saved 15%. I'm a bot and I'm open source!

This is the best summary I could come up with:

Data collection around users tends to be a very touchy subject in the Linux/open-source world even when opt-in and Fedora Workstation 42 has just seen a proposal raised to do just that.

If approved the Fedora Workstation 42 release would roll-out an opt-in metrics system of anonymous user information from system settings to hardware information and desktop usage patterns.

The proposal aims to collect more real-world representative information about Fedora Workstation use that would help developers focus their efforts moving forward and help with data/use-case discovery and analysis.

All data points would be collected individually as well to prevent system/user finger-printing.

The proposal was just posted to the Fedora devel mailing list to which there have been no comments yet but given the topic will certainly lead to an active discussion.

This isn't the first time such a change has been proposed for Fedora Linux but over the years have been various efforts around privacy-preserving telemetry, per-system unique identifiers for DNF, etc.

The original article contains 267 words, the summary contains 162 words. Saved 39%. I'm a bot and I'm open source!

Maybe next year it'll be less of an issue in the EU, when the commission has forced Apple to comply and third party stores are finally properly allowed. They won't be able to force third parties to follow arbitrary rules.

Anti Commercial-AI license

This is the best summary I could come up with:

It also supports Bluetooth wireless and USB-C wired connections as well as a whole bunch of custom programmability using Hori’s software.

The new controller is set to launch in Japan on October 31st in four colors (black, white, neon yellow, and violet), selling for 7,890 yen (about $50).

I tested the Horipad Pro for our Xbox controller buying guide and found it to be serviceable with fine ergonomics and a great D-pad — though it was somewhat outclassed by other options that run cheaper.

Hori’s decision to start sales in its home country makes sense, but it may also speak to the rise of PC gaming in Japan, with handhelds being such a popular choice there that Valve spun up a partnership with an entirely different company for Steam Deck distribution (including in-store availability).

In general, gamepad usage in Steam is on the rise — as Valve’s just-released statistics show.

Perhaps this is setting the table for a wide swath of licensed Steam controllers from a variety of manufacturers like we see on Xbox consoles — with more wireless options, I hope.

The original article contains 449 words, the summary contains 182 words. Saved 59%. I'm a bot and I'm open source!