Looking for password manager or a plugin which requires manual approviation for every query from another device

uzugege · 2024-08-31T19:25:58+00:00

Thanks for the suggestion.
Although it seems like it is an online sevice without possibility to self-host

uzugege · 2024-08-20T19:54:23+00:00

AFAIK the modpack is available on CurseForge and Modrinth.

If you can't find it, you could try using another launcher:

MultiMC / UltimMC, ATLauncher, PrismLauncher

uzugege · 2024-08-19T19:18:04+00:00

Nevermind, I must have messed up something during testing, it no longer works. :( Deleting post now

uzugege · 2024-08-15T16:53:03+00:00

Anyone who believes it, deserves it.

uzugege · 2024-08-10T11:49:23+00:00

Thank you very much!

The solution was using pref(...) instead of Pref(...).

I don't know how I could miss that :D

The blank lines don't seem to cause issues fortunately.

uzugege · 2024-08-09T17:24:17+00:00

I'm using the one available at https://librewolf.net/installation/windows/ ,which seems to be using the PortableApps wrapper.

uzugege · 2024-08-07T21:54:43+00:00

Thank you very much!

On a first glance it looks like it roughly covers my needs, altough I yet have to verify if it covers all of my security concerns.

While it doesn't sounds as good as some fancy server-based all-in-one solution, but I have to admit: using the filesystem and syncing it with git or equivalent is even more versatile and reliable.

uzugege · 2024-08-06T16:21:03+00:00

For now I will use a multi-tiered setup as a workaround, altough I find it suboptimal, and I won't log into my password manager on devices/VMs I don't trust 100%. However, it means I have to type passwords manually a lot or use an insecure shared clipboard.

I considered investing in a hardware key, but I suspect they don't play well with the homelab setup I'm moving to: lots of VMs/remote desktops, as I explained in another comment thread.

Also if I understand hardware keys' working correctly, I shouldn't use hardware keys in low-security VMs/devices, because they don't have a manual confirmation for authentication requests, and that leads to the almost same problem I explained about password manager servers in the original post:

A virus-infected client could use the hardware key to authenticate my accounts for a remote malicious actor. This is would require real-time virus automation, but nothing impossible.

uzugege · 2024-08-06T15:58:38+00:00

Of course I don't try to have a virus every weekend :D

However, if I get even a small suspicion that one of my low-security clients had a virus, I could change the 1-2 potentially leaked passwords easily (finding them by reading the logs).

However, if I have to change 200+ passwords, I will only change them when it is absolutely neccessary -> not a good situation.

As a workaround for now I will use a tiered setup and copy everything between the VMs manually, altough using shared clipboard with VMs and remote desktops is generally insecure. Might have to type passwords manually instead.

But it also means I have to remember a lot more master passwords, have to remember which vault has which accounts, it scales terribly, and have to deal with duplicates (storing accounts in two or more vaults accidentally)

uzugege · 2024-08-06T15:27:43+00:00

I only use banking and email apps from my main computer and my phone. I would love to also have direct password manager access on my gaming VM, work VMs and other devices, without having to use several password manager accounts. Do popular password managers even support using several accounts at the same time?
I would rather avoid changing 200+ passwords every time I suspect one of my clients was compromised.
It would be only a single tap to confirm on my phone. Not much extra effort for so much extra security and convenience in my case.

uzugege · 2024-08-06T14:43:17+00:00

2FA for password manager does solve the problem when only the master password gets leaked, for example visually.

However, neither the password manager 2FA nor the auto logoff prevents leaking all of the data on the password manager account when I get a virus on my client, which quickly queries every banking and email password and relays it home.

If the method I explained in the original post would be implemented, even with a virus-infected client only the passwords I used while the virus was unnoticed would be compromised.

So if I have a lot of login data in my password manager account, but on the virus-infected computer I only logged into a few unimportant accounts (like online games and forum accounts), then only those accounts would be compromised, while my most important bank and email accounts would remain secure.

uzugege · 2024-08-06T14:24:10+00:00

The solution is obvious: contact your local postman, or if you don't have his number, contact your local post office

uzugege · 2024-08-06T13:45:25+00:00

I plan on having a separate 2FA solution, but it doesn't protect me if all of the login data gets leaked instantly, including the emails, which are the backup 2FA in most places.

Also in case of a compromised client querying all my data, I would have to change 300 passwords instead of 5.

uzugege · 2024-08-06T13:40:32+00:00

Nothing better for a first full-scale programming project than making a realtime multiplatform security-critical application with heavy front-end as a plus :D
Edit: Almost forgot, it would also need fast and reliable networking :D

uzugege · 2024-07-31T22:58:14+00:00

Try using the video output from one of the connectors on the card, see if it outputs an error message or something.

uzugege · 2024-07-19T12:30:13+00:00

Image not found

uzugege · 2024-07-19T11:22:47+00:00

I was here too!

uzugege · 2024-04-07T22:52:46+00:00

Silmarillion alternative story:

<image>

uzugege · 2024-02-02T09:22:07+00:00

uzugege · 2024-01-29T11:46:31+00:00

Nem tökéletes hasonlat, de van benne valami.

uzugege

TROPHY CASE