Well they dont lol, they are super flimsy these days and most stuff is soldered on. Its good if this turns out to be the start of the return to good thinkpads, but i wouldnt get my hopes up yet.

Thats nonsense, there are plenty of phones and tablets with usbc video output. Its been a feature for like a decade. Other companies have had working desktop modes for a long time and google just abandoned their work on it until they decided they could use it as a marketing feature. They probably just didnt want the pixel to cut into the chromebook marketshare.

The 4 (iirc) also had USBC video out but google removed that functionality only to now have a reason to sell you a new phone. I hope its actually good and they publish source for it as part of AOSP, otherwise this news is fucking useless.

They also had to correct their results last month for some reason. I think they are just having issues with their surveys rn. Also there were multiple 30+ minute steam network outages in Europe in the past few days. Europe is definitely the majority of linux steam users so that might be related.

I know you are looking into editing the files, but you can probably also do this with live filters with something like easyeffects.

Its more like a few thousand devices, not 30-40 but ye.

That works too of course :) Welcome to the world of linux!

To enable flatpak in Discover go to its settings page and at the bottom click “install flatpak backend” or something like that. Then when thats done you need to enable “flathub” on the same page as the package source for flatpak. You might have to restart in between or after these steps if it doesnt show up.

Only “flatpak” though, not “snap” because that sucks.

Yes of course you CAN make it safe in theory, but unless you run the web interface locally or on your own server, you cant be certain that the javascript delivered to you from the hoster hasnt been modified. Its like having autoupdates on but you have zero control over when or how the updates take place, because every time you open the page it could be different code from the last time.

So as long as you trust the encryption algorithm (which in elements case you definetly can, because it is OSS)

How do you know that the code on elements github repo is actually the same code that you get delivered from your homeserver that is hosting the web client? Your homeserver can just modify the web clients code however it wants and deliver a backdoored or faulty version to you. Which means you dont just have to trust the open source code, but also the admin who is managing the homeserver and also the hosting provider.

Is this really so hard to understand? Literally the entire client is delivered on demand from a remote server, obviously that is insecure if you dont control that server.

Just set it up so that the resulting .kdbx database file is always instantly synced between your devices whenever you make changes. Everything is in that file and all keepass versions can open it. I use syncthing for this because it doesnt require a server, but you can use nextcloud or whatever you have available. With syncthing it always just keeps the most recently modified version.

This is the kind of thing that machine learning is very very good at. Its never going to be perfect but its definitely gonna outperform humans.

KeepassXC is the goat :)

The database file is encrypted so its fine to sync it however you like. I use syncthing for it which is p2p. Obviously set a very good password on it if you sync it through unsecure channels.

Bro i have my bank details, all my private 2FA, work 2FA, health insurance access, my families master passwords, steam access, and more in there. Its literally the most important piece of software that can exist in this day and age. No im not taking chances with that. The only thing you can do with my physical wallet if you rob me is buy something up to 20€ beyond which you need the cards pin. Everything else i can just deactivate by calling the relevant parties.

But on another note, websites have never really been resistant to MITM attacks. So you dont just have to trust the hoster but also everything in between you and them.

There is no way to patch the inherent flaw that comes with delivering client software through a web browser. If the entire client is delivered as a web page from a server you dont control, then that server can modify the software however it pleases. Same applies to e2ee encrypted chat clients that run as a web page like element-web (browser based matrix client).

Yes, if you arent self hosting the web interface or using the desktop client.

OMFG can people please fucking go away with this stupid “password managers are worthless” bullshit today. They are exactly as secure as promised, unless you went to the obviously shady ones that use web interfaces. People have been saying this for years, if you want security, keep your password manager offline.

I mean the fact that they dont have any access controls on their servers should tell you how technically competent those cops are.

In germany its also catastrophic. I remember three stories off the top of my head where security researchers were raided or sued after properly reporting massive security issues in company software.

Yeah i saw that back then, it happened multiple time with different organizations iirc.

How is a fucking URL all you need to access confidential evidence on a police server. Lets bruteforce some URLs i guess?