275
Alright, y'all were right, fuck Proton. This was the last straw for me. (thelemmy.club)
submitted 7 months ago by to c/privacy@lemmy.ml
132 comments fedilink hide all child comments
 

For context, in my password manager I had tried formatting some of my entrees so that it would contain the usual username and password, but instead of creating whole new entrees for the security questions for the same account, I just added additional fields in the same entree in order to keep things a little more tidy.

I was not expecting that doing so would result in later being shaken down by Proton to pay even more money just to access the same few bytes of fucking text I had trusted them with. This is sleazy as fuck and I am dropping these idiots entirely.

you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 7 months ago (3 children)

Why are you suggesting self hosting vaultwarden instead of self hosting bitwarden?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 7 months ago*

    Self hosting BitWarden still means it's accessbile for them and/or from them. You also have no way to audit their security from what I understand. VaultWarden is FOSS, if you want to, you can go check. And it does get checked by people with the competence to check this do every now and then. [Edit: I forgot that BitWarden is actually souce-available as well, while not being FOSS that's still better than most solutions]. I just prefer full FOSS whenever possible. I prefer it not be a black bos I just happen to run on my own server.

    If you self host VaultWarden, the instance can just be not accessible from the internet, and only from behing a VPN. Obviously this is inherently much safer. If that's possible with the self-host option I don't know, but even just for licensing the local instance will have to be able to reach their servers (possibly be reachable from their servers, too). I did see they got an "offline deployment" option for air-gapped servers, but haven't looked into what limitations that entails.

    Additionally, you're still within their licensing model. So for certain features you need to have a not-free account (like even just more than 2 people).

    And like others said, VaultWarden is much lighter on resources in general and you aren't limited in what you can and can't do (users, collecitons, auth-options, ...).

  • permalink
  • fedilink
  • source
  • parent