meetups were powered by lenode and it has been a hoot so go sign up today and see what i've been talking about that NUMBER_TOKEN you're going to get you can really use that to try the service out you can really get a feel for what it's capable of that's a hundred dollars to really try something or learn something URL_TOKEN ssh that's URL_TOKEN ssh here's an email from hans han says hey guys you touched upon password managers and bit warden in episode NUMBER_TOKEN. like brent i'm using keepassxc good good choice what i like about it is that it's easy to backup because the whole database is just a single file currently sync it between my devices via self-hosted sync thing instance running on an arm board in our laundry room laundry room servers very nice that being said this setup is a few years old and if i would start from scratch or if i had to share the password with other people i'd definitely give bit ordinance look one thing i wonder though when you host your passwords in a more complex application like bitworn are you taking any extra measures to secure your servers i suppose it's reasonable to trust the security of bitwarden itself but if an attacker would gain access to your server would it be easier for them to do harm as compared to what you would just host an encrypted keepass database file to thanks and keep on going hans well i think it depends on how open your server is if it's connected to the internet you've got to assume at some point you know it's possible it might get compromised but it it speaks to a larger philosophy that i tend to subscribe to with this kind of stuff of don't be the tallest nail you know take some basic precautions have things like fail to ban installed on your ssh logins open as few ports in your firewall as you possibly can use something like wireguard or tailscale or something like that to actually connect to the service in question so that all the data that travels between everything is encrypted you know and use things like ssh keys instead of passwords just just those things alone are going to make you more secure than the average server administrator vault warden is the new hotness these days bit warden rs is the old name um and i do agree with everything you just said alex don't don't be the tallest nail but also consider the security of the box of possible limited internet access and also keep in mind bit warden is using local encryption so it encrypts and hashes your data on your local device before it sends it to the cloud server even even if it's their service or your self-hosted service so that gives you some peace of mind knowing that the data that's at rest on the server is encrypted now alex you mentioned uh being a shorter nail um have either of you in all of your years encountered situations when you were one of the taller nails and ran into issues i mean like had a server compromised basically that's what i'm asking yeah it's never very exciting um it's usually like a server gets turned into an ftp box or somebody gets a process on your machine i mean i think i've had maybe a client or two that that's happened to um it's never anything uh
START_SPONSOR_TOKEN meetups were powered by lenode and it has been a hoot so go sign up today and see what i've been talking about that NUMBER_TOKEN you're going to get you can really use that to try the service out you can really get a feel for what it's capable of that's a hundred dollars to really try something or learn something URL_TOKEN ssh that's URL_TOKEN ssh END_SPONSOR_TOKEN