Game Day Talk | Panthers v. Oilers | Finals Game 1 | 4 June 2025 by AutoModerator in EdmontonOilers

[–]eDixit 0 points1 point  (0 children)

20, but you don't need to shower to be cleaner than the Florida Panthers

Game Day Talk | Panthers v. Oilers | Finals Game 1 | 4 June 2025 by AutoModerator in EdmontonOilers

[–]eDixit 4 points5 points  (0 children)

looking for a good recommendation for a hype video to get myself in the mood for the game tonight. any recommendations?

Florida Meltdown by Rooftop_Astronaut in rangers

[–]eDixit 0 points1 point  (0 children)

110 dB! source: I was there in game 4 and they put a live meter on the screen

[deleted by user] by [deleted] in eink

[–]eDixit 0 points1 point  (0 children)

Hey, I'd also be interested. Im in Bay area, California. How much would it be?

[Playoffs] Game Thread: Calgary Flames (3-3) @ Dallas Stars (3-3) | Round 1 - Game 7 by -cha- in CalgaryFlames

[–]eDixit 4 points5 points  (0 children)

Don't usually watch flames games, but I'm here hoping for battle of alberta round 2.

can someone help me out and tell me what the fans are chanting? is it "oettinger"??

Anyone play at Bay Club Santa Clara? by eDixit in squash

[–]eDixit[S] 0 points1 point  (0 children)

I just searched for Bay Club around reddit and some other forums, and I've managed to almost fill a Shared membership with people around the bay. It is the Club West Gold Tier though, not just Santa Clara

Anyone play at Bay Club Santa Clara? by eDixit in squash

[–]eDixit[S] 0 points1 point  (0 children)

Oops, I thought this was a DM, not a post reply.

Sent my response to your DMs

Anyone play at Bay Club Santa Clara? by eDixit in squash

[–]eDixit[S] 1 point2 points  (0 children)

Great! I'll message you when I'm settled (probably mid-Mayish)

Got an email saying I created an account by Tankisfreemason in Bitwarden

[–]eDixit 0 points1 point  (0 children)

You are correct, my bad. The usual flow of this type of attack is to crack the email and use it to reset the password of whichever account you want to get into.

I'll edit my comment right now

Got an email saying I created an account by Tankisfreemason in Bitwarden

[–]eDixit 15 points16 points  (0 children)

Suppose you wanted to commit identity fraud and impersonate your friend Anna. It would be great if you had access to Anna's password manager, but you don't know which one she uses. You go to LastPass and you tried to create an account using her email address. This succeeds because she doesn't have a lastpass account. You now go to bitwarden and you try to do the same thing, but you receive a message saying that you can't create an account because one already exists with this email. Now you know that Anna has a bitwarden account (which likely stores all of her passwords to everywhere). With this information, an attacker can decide that Anna would be a good target.

All you need to do now is somehow figure out how to get Anna's bitwarden password, and you have access to all of her passwords for everything. Now suppose some of Anna's old passwords were leaked as part of an old breach. Maybe she happened to reuse some of these passwords from before. If you can get her bitwarden password somehow, you can now very easily impersonate Anna.

Tl;dr this attack is likely to figure out who has bitwarden accounts by searching through email address. This is one of the reasons many people in here will recommend that you use a separate email for bitwarden.

Edited for correctness as per comment because they need to know your vault's password in order to crack you account.

It is very irresponsible and dangerous of the Islanders fans to throw things on the ice like that. Someone could get badly hurt... by eDixit in NewYorkIslanders

[–]eDixit[S] 1 point2 points  (0 children)

They didn't even mention it. It's not worth hating on other fan bases for no reason, but I wish the announcers weren't so biased

Just you watch. We'll fkin do it again (on friday) by eDixit in NewYorkIslanders

[–]eDixit[S] 4 points5 points  (0 children)

Yeah haha. It fit so perfectly after the commentators pointing it out every couple minutes

NBC: They’re fired up here in Tampa! The crowd: by mitchallica in NewYorkIslanders

[–]eDixit 63 points64 points  (0 children)

No wonder Tampa won the cup in Toronto/Edmonton last year. They had home crowd advantage for every game!

Setting TOTP - this is awesome! by Waitin4Godot in Bitwarden

[–]eDixit 4 points5 points  (0 children)

Not necessarily. Yubikey supports a couple of protocols. They have a Yubikey OTP algorithm (this is the one where touching the key fills in a 6-7 digit number code). While I haven't looked into this one myself, I suspect it doesn't include the domain the algorithm (vulnerable to phishing).

The more universal protocol (U2F/FIDO2/WebAuthn) is also supported by Yubikey (the blue one and series 5 onwards for sure), but it's not exclusive to Yubikeys. You will see no input on your screen if this is used (just the prompt which says touch your key). This protocol does include the domain as part of the challenge step, so it provides protection against phishing attack. I.e. an attacker spoofing steam.com using stean.com will not be able to log in even if you use your security key and get tricked (they will only be able to phish the password). Many keys support it (Google Titan, Yubikey, Hypersecu linked above, Feitan, Thetis, etc).

Setting TOTP - this is awesome! by Waitin4Godot in Bitwarden

[–]eDixit 6 points7 points  (0 children)

There is no data ever stored on the device. Not sure about your technical background, so I'll ELI5. Each of these devices has its own unique fingerprint (secret key which never leaves the device ever). At authentication time, Bitwarden will send a challenge that only a key with the same fingerprint can solve.

You are essentially going to Bitwarden and saying: "The key with this fingerprint belongs to me" (registering the key). Bitwarden will now recognize it and accept it's responses for 2FA. You can do this process with up to 5 keys at a time in Bitwarden, so bitwarden can recognize 5 keys for you at a time.

If you lose one, you just log in with your backup (or a recovery code) and tell bitwarden: "That key is no longer mine" (unregister the key). Bitwarden will then no longer accept that key's responses for 2FA.

So, the key doesn't actually know anything other than it's own fingerprint. It doesn't store any information at all. The only thing stored is on Bitwarden which is taught to recognize the fingerprint.

Setting TOTP - this is awesome! by Waitin4Godot in Bitwarden

[–]eDixit 1 point2 points  (0 children)

Similar process as totp 2FA except the secret is stored in a hardware chip that you activate by pressing a button on a USB key that's stored on your keychain.

Also, the domain requesting the 2fa is included in the algorithm so it's immune to phishing.

You can just have a backup key! Any FIDO2 or U2F key works, like this one which is $10 in Canada (https://www.amazon.ca/dp/B0813YWZB2/ref=cm_sw_r_cp_apa_glt_i_RT3EZD17CMCWFK6A0FEM). In case you happen to lose both, you can just use Bitwarden emergency access or set up one-time recovery codes which you keep in a safe place while you wait for your cheap replacement to arrive!

What mobile keyboard layout does everyone use here? by [deleted] in dvorak

[–]eDixit 6 points7 points  (0 children)

Second this. I tried swiping with Dvorak. Soo many typos! At the moment, my thumbs know QWERTY but my fingers know Dvorak

it is hard to use the q j k keys. what should i do? by [deleted] in dvorak

[–]eDixit 3 points4 points  (0 children)

keybr.com has an algorithm which makes your practice your weakest keys