KeePass + Syncthing post && Management Engine definition && Site Map updated
TitanElectrons
1 year ago
parent
dec0b4a138
commit
143d640b52
@ -0,0 +1,43 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<head>
|
||||
<title>(POST) KeePass + Syncthing</title>
|
||||
<link rel="icon" type="image/x-icon" href="../../images/favicon.webp">
|
||||
<link rel='stylesheet' type='text/css' href="../../style.css">
|
||||
<link rel='stylesheet' href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css" media="all">
|
||||
<meta charset="utf-8"/>
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<a href="../../"><div style="text-align:center"><img src="../../images/sufyaan.webp"></div></a>
|
||||
<hr/><p><a href="../../">sf.cu</a> > <a style="color:#bd93f9" href="../">Blog</a> > <a style="color:#bd93f9" href=".">KeePass + Syncthing</a></p>
|
||||
<h1><i class="fa fa-key" aria-hidden="true"></i>KeePass + Syncthing</h1>
|
||||
<p style="font-size:110%"><strong>Posted on 23 June 2023</strong></p><p><strong>Categories: </strong><a style="color:#ff79c6" href="../software/"><i class="fa fa-laptop" aria-hidden="true"></i>Software</a></p>
|
||||
<p>I have decided to switch from a self-hosted Vaultwarden (Bitwarden) instance to using KeePass along with Syncthing to sync it to all my devices. There are numerous reasons why I decided to make this change.</p>
|
||||
<h2><i class="fa fa-lock" aria-hidden="true"></i>Security</h2>
|
||||
<p>The offline nature of KeePass makes it so that it is nearly impossible to crack. Connecting things to the internet makes it trivial for a script kiddie thousands of kilometers away from you to attempt to crack your passwords. A password manager is a place where all of your passwords are stored. Due to this very reason, I decided to upgrade my security by moving to a reputed piece of software.</p>
|
||||
<p>It has a plethora of security features. Firstly, it has the ability to generate passwords of any length. It allows you to choose what characters are allowed. Its generation is so complex and liberating that even foreign characters like <code>Æ</code>, <code>É</code>, or even mathematics symbols and arbitrary symbols that no one would care about can be used. For example, the division sign (÷) or the copyright symbol (©) are included in password generation. Since most hackers try alphanumeric character cracking, KeePass password generation can make your passwords practically impossible to crack.</p>
|
||||
<p>The encryption algorithm used for your password database is AES-256, commonly known as 256-bit encryption. It is a form of encryption that is so difficult to crack that the only way you can actually hope to obtain someone's password is by phishing them or using external methods. For more information, please <a href="https://yewtu.be/watch?v=S9JGmA5_unY">watch this video by 3Blue1Brown.</a> It is extremely interesting.</p>
|
||||
<p>In fact, KeePass is so secure that even the passwords that are stored in your memory while you are viewing your database is encrypted. That way, even a <a href='../../definitions/management-engine' style='color:#50fa7b'>management engine</a> attack will not work. If you want to try viewing the cleared memory sectors to find remnants of your passwords, good luck. The passwords which are stored in your memory are first overwritten to the point of unrecoverability before being cleared.</p>
|
||||
<p>You can even setup a keyfile (a file you need to use to login), a <a href='../../definitions/security-key/' style='color:#50fa7b'>security key</a>, or both.</p>
|
||||
<h2><i class="fa fa-code" aria-hidden="true"></i>View. The. Code.</h2>
|
||||
<p>KeePass is open-source under the GPLv2 license, which is the best open-source license for people's freedom. That makes it <a href='../../definitions/free-software/' style='color:#50fa7b'>free software</a>.</p>
|
||||
<h2><i class="fa fa-user" aria-hidden="true"></i>The Encryption Never Stops</h2>
|
||||
<p>Along with KeePass, I use Syncthing to sync my database. Syncthing also uses cryptographic encryption. This makes it so that anyone who wants to brute-force my database needs access to both my Syncthing password and my KeePass password.</p>
|
||||
<h2><i class="fa fa-book" aria-hidden="true"></i>To Conclude...</h2>
|
||||
<p>I use KeePass along with Syncthing for three reasons.</p>
|
||||
<ol>
|
||||
<li>KeePass is extremely secure. It has industry-standard protection methods and algorithms and its offline nature makes it practically uncrackable.</li>
|
||||
<li>It is fully <a href='../../definitions/free-software/' style='color:#50fa7b'>free software</a> under the GPLv2 license</li>
|
||||
<li>Syncthing is also encrypted, which means that an attacker who wants to attack me using the internet needs to crack both my Syncthing password and KeePass password which would take billions of years.</li>
|
||||
</ol>
|
||||
<p>I am probably never going to switch back because this system works extremely well. Syncthing is very fast at staying up-to-date.</p>
|
||||
<p><a href="mailto:sufyaan@counterhawks.com?subject=Switching%20To%20FFmpeg">>>> Reply To Me</a></p>
|
||||
<p style="text-align:center;"><a href="../keepass-syncthing/" style="color:#bd93f9"><i class="fa fa-angle-double-left" aria-hidden="true"></i>Previous Post</a></p>
|
||||
<hr/>
|
||||
<footer>
|
||||
<p class="footer-text"><a style="color:#bd93f9" href="../../blog">blog</a> - <a style="color:#ffb86c" href="../../about">about</a> - <a style="color:#f1fa8c" href="../../portfolio">portfolio</a> - <a style="color:#ff5555" href="../../links">links</a></p>
|
||||
<p class="footer-text" style="font-size:80%"><a href="../../">sufyaan.cyou</a></p><p class="footer-text" style="font-size:65%"><a style="color:#aaaaaa" href="../../sitemap">Site Map</a></p>
|
||||
</footer>
|
||||
@ -0,0 +1,32 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<head>
|
||||
<title>(DEFN) Sufyaan's Webpage</title>
|
||||
<link rel="icon" type="image/x-icon" href="../../images/favicon.webp">
|
||||
<link rel='stylesheet' type='text/css' href="../../style.css">
|
||||
<link rel='stylesheet' href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css" media="all">
|
||||
<meta charset="utf-8"/>
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<a href="../../"><div style="text-align:center"><img src="../../images/sufyaan.webp"></div></a>
|
||||
<hr/>
|
||||
<p><a href="../../">sf.cu</a> > <a style="color:#50fa7b" href="../">Definitions</a> > <a style="color:#50fa7b" href=".">Management Engine</a></p>
|
||||
<h1 style="text-align:center;margin-right:8vw;margin-top:20px;">Management Engine</h1>
|
||||
<div style="text-align:center;">
|
||||
<img src="management-engine.webp" alt="Micro-Controller Diagram (credit: proprivacy.com)">
|
||||
<figcaption>Micro-Controller Diagram (credit: <a href='https://proprivacy.com/privacy-news/intel-management-engine'>proprivacy.com</a>)</figcaption>
|
||||
</div>
|
||||
<p>A management engine is basically a computer inside your central processing unit (CPU) that has full access to your hardware at all times. The issue with it is that it can be exploited to get full access to a lot of data related to the computer even with it turned off. For Intel CPUs, the Intel Management Engine (IME) has been introduced in 2008. For AMD CPUs, the AMD Platform Security Processor (PSP) has been around since 2013. </p>
|
||||
<p>It can be considered a backdoor. Intel may not have had a malicious intent of creating a backdoor, but it does function as one. In fact, government organisations can simply use the management engine to get access to your memory and computing history.</p>
|
||||
<hr/>
|
||||
<footer>
|
||||
<p class="footer-text"><a style="color:#bd93f9" href="../../blog">blog</a> - <a style="color:#ffb86c" href="../../about">about</a> - <a style="color:#f1fa8c" href="../../portfolio">portfolio</a> - <a style="color:#ff5555" href="../../links">links</a></p>
|
||||
<p class="footer-text" style="font-size:80%"><a href="../../">sufyaan.cyou</a></p><p class="footer-text" style="font-size:65%"><a style="color:#aaaaaa" href="../../sitemap">Site Map</a></p>
|
||||
<p class="footer-text" style="font-size:80%; margin-bottom:-0.1%; padding-top:1%">XMR <a href="../../images/xmr.png">(QR)</a>:</p>
|
||||
<code style="font-size:65%">8A8HeXwULYKWtbujMkGiBYKQPahJCT3ye2N6wCAdEv1L6ipoJjDmfVLKa7XnmE77nGLFmu5dGrL8U4zVGrkDncKEDfkpDEj</code>
|
||||
<p class="footer-text" style="font-size:80%; margin-bottom:-0.1%;">BTC <a href="../../images/btc.png">(QR)</a>:</p>
|
||||
<code style="font-size:65%">bc1qj0zdajhrg5uxac036u2t5empuc7xwrds5dde98</code>
|
||||
</footer>
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 60 KiB |
Loading…
Reference in New Issue