• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: July 8th, 2023

help-circle


  • jeffhykin@lemm.eetoSelfhosted@lemmy.worldReview of LessPass?
    link
    fedilink
    English
    arrow-up
    2
    ·
    7 months ago

    The abbreviation method LessPass uses works pretty well. Its usually only a problem with a re-branding, like how wefwef changed to voyager. When that happens it’s not too big of a deal, I just change it to the new thing.

    What is a big problem with the URL though is login portals. Like when it’s some conglomerated system that involves a million redirects, and/or a “login with XYZ”. They can get some really weird URLs that have nothing to do with the actual site and those are a real pain.


  • jeffhykin@lemm.eetoSelfhosted@lemmy.worldReview of LessPass?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    7 months ago

    #3 isn’t true. There’s a username field, so you just put in the username of the alt accounts.

    Your point about the master password and two factor is a good one though.

    In practice password restrictions are rare (like 1% of sites), but they are problematic when they happen because there’s so many different ways to restrict passwords and trying all combinations is impractical. Needing the counter is exceedingly rare. Remembering the username isn’t a problem, but if you don’t have a consistent policy of always-using-a-username or always-using-the-email (as the lesspass username) it can be difficult to remember that. Similar situation with the URL, if it’s not abbreviated consistently, then it’s a problem.

    That said, I still use LessPass for everything and just deal with the edgecase problems.


  • jeffhykin@lemm.eetoSelfhosted@lemmy.worldReview of LessPass?
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    edit-2
    7 months ago

    Despite what others are saying, I’ve been using it for a couple years and it can work great if you’re okay with the trade-offs.

    Of the three (Integrity, Confidentiality, Availability) it has better availability than cloud storage which is what I care about. Even when the LessPass site is down, there’s an IPFS version, mirrors, local cache, etc so it’s basically always possible to derive any password.

    At a user level, it’s very impractical (and a slight risk) to always retype the master password at every single login screen. However, letting the local autofill save the password doesn’t defeat the point of LessPass. Why? because, if you only use local storage, and you’re traveling and your phone breaks, you’re now locked out of every account. With LessPass, you’re fine as soon as you get an internet connection.

    There are a few caveats.

    • There’s no global 2factor. Loosing the master password means every site that doesn’t have its own 2factor is instantly fully exposed.
    • I do agree there are a few sites where the default options don’t work because of the character restrictions. It’s about 1.2% of websites in my experience, but they are painful exceptions. Basically you have to rely on memory to be able to pick those same settings again. I recently wish there was a unified dataset of which websites had password requirements, and then LessPass would auto check the necessary boxes when the website URL was pasted in. Maybe one day.
    • Changing your master password requires changing every single website. If you don’t, then it’s impractical to remember what password was used for what site.



  • Under a centralized system, bans are terrible. But federation is awesome because it’s perfectly okay for an instance to be ban-happy. Just join another instance. (I’m on lemm.ee because I want to see everything)

    Not only is it fine, but I think we actually need a variety of instances; no-bans, some-bans, lots-of-bans, and excessive-bans. People should have the choice.


  • Yeah I could’ve been more clear. I mean the All feed not Local. I went and updated my comment. And to be fully clear, I’ve got no complaints about lemm.ee. It’s exactly what I want, e.g. show me everything and I’ll decide what to block. That said, I know I’m not the norm.

    Saying you blocked a fair amount is exactly what I’m talking about, so have I. A little bit of effort can really make the feed more palletable. We need to have a place where that is done by default. Maybe even an open source AI or even just an algorithm that tailors it to the user. I’m already glad Lemmy.world is much more moderate than lemm.ee, and we just need a place that goes all the way; NSFW blocked by default, several communities blocked-by-default (not defederated), and somehow prevents All from being flooded by niche memes. I love Linux and the memes (even if they get a bit repetitive) but we shouldn’t have 3 of the top 10 posts be linux memes.

    I tried to get my lab mate, a PhD in computer science and Linux Mint user, to get a Lemmy. He took one look at the all page, laughed, pointed out the circle jerk stuff and asked how some junk posts even made it to the all page and then said “yeah, no thanks” and has never touched Lemmy since. He was already 4 times more likely than the average person, but even he was instantly turned off.


  • Yeah I completely disagree. Imagine if a city/local gov wanted to use Lemmy in order to be self hosted (similar to EU govs switching to Mastodon) but the public just wonders why their local gov put their stuff on a weird circle jerk website that’s flooded with niche memes. “Why didn’t they use the normal thing (i.e. reddit)?”

    We should be welcoming enough that, when someone wants to make a new subreddit, they make Lemmy community instead. And I don’t think thats the case right now.


  • jeffhykin@lemm.eetoMemes@lemmy.mlWhy? Are we not doing enough?
    link
    fedilink
    arrow-up
    39
    arrow-down
    2
    ·
    edit-2
    8 months ago

    Yeah the “All” in particular is pretty bad for the average person. They’re not going to enjoy a Star Trek meme, followed by a Arch meme, a Self-hosted post, a grad-student Science meme, followed by a privacy post.

    I’m also convinced Lemmy’s “hot” algorithm is broken; I can easily find posts with ONE UPVOTE on the all feed. Hot is supposed to be a balance between acceleration and total vote count, but it seems like it just only acceleration. Go look at the front page of reddit. The difference is night and day.

    We need a normie.world that has an “all” feed that doesn’t contain 70% niche communities. We have c/humor, c/news, etc but they’re completely diluted by overpowered niche posts.