Software Endorsements

[wew lad]

Spoiler: Video Archived

View attachment 8926753

Fuck. What's this thread's preferred password manager these days?

I looked into this without watching that faggot's video and found the statement released by Bitwarden.

tl;dr Bitwarden-CLI was affected by a supply chain attack where a Github Action in their CI/CD pipeline was compromised using stolen Github tokens, and a version of the bitwarden-cli package was published with a trojan in it. Checkmarx got hit with the same sort of attack, and both attacks tried to steal the same data from users: "GitHub and npm tokens, SSH keys, shell history, cloud credentials, and AI tool configurations for Claude, Cursor, and Aider." No other Bitwarden applications or user vault data were affected.

 

[⠠⠠⠅⠑⠋⠋⠁⠇⠎ ⠠⠠⠊⠎ ⠠⠠⠁ ⠠⠠⠋⠁⠛]

I looked into this without watching that faggot's video and found the statement released by Bitwarden.

tl;dr Bitwarden-CLI was affected by a supply chain attack where a Github Action in their CI/CD pipeline was compromised using stolen Github tokens, and a version of the bitwarden-cli package was published with a trojan in it. Checkmarx got hit with the same sort of attack, and both attacks tried to steal the same data from users: "GitHub and npm tokens, SSH keys, shell history, cloud credentials, and AI tool configurations for Claude, Cursor, and Aider." No other Bitwarden applications or user vault data were affected.

I mean... it's written in Node.

If someone buys out one of the developers for the various dependencies, let's say oh 'big-integer', YOU'RE FUCKED.

 

[Lemmingwiser]

Password managers always seemed like an unnecessary security risk.

Like putting your housekey in or under a flowerpot.

 

[StimulatedOrb]

Password managers always seemed like an unnecessary security risk.

Like putting your housekey in or under a flowerpot.

Nah, most are pretty safe. The previously mentioned bitwarden issue is very niche and doesnt effect the general users of the vault.

If you want to be really secure, keepass is pretty solid as you cannot hack that which is entirely local. Of course you have to manage your own shit, but tradeoffs for even more security.

I have no issue phoning my bank and telling them some retard has stolen my details and bought a brand new guitar, the bloody idiots, anyway, need that money back champ.

 

[Harmless Harm]

Password managers always seemed like an unnecessary security risk.

Like putting your housekey in or under a flowerpot.

Once you get used to using them, you log in faster, worry less, and can easily keep track of all your accounts and emails. You can also set up 2FA TOTP. I use KeePassXC but I would probably recommend Bitwarden to someone who wants more simplicity. And at least for 2FA get something like Aegis if you have an android phone.

 

[Hellwalker]

EventLook is an improved Windows event browser.

Forget about this:

View attachment 8916242

and use this, it's way more convenient:

View attachment 8916249

If we're talking about modern alternatives to ancient Windows programs, then FluentTaskScheduler is a nice, modern frontend for Task Scheduler.

It comes with basically every feature from Task Scheduler, as per the Github page:

I still personally use the ol' taskschd.msc when I need more granular control but FluentTaskScheduler still provides a more straightfoward and comfortable view whenever I desire such.

 

[Ferryman]

Not software per se but a software list: https://terminaltrove.com/ has a huge list of really cool terminal programs if you're a dirty no good fucking rice addict like yours truly.

 

[Sayer of the N-Word]

I've found PDF-Xchange to be excellent. It's essentially the only perpetual-licensed PDF editor left out there that isn't going to rugpull you.

https://www.pdf-xchange.com/product/pdf-xchange-editor

There's a free version but I think the editing features are rather limited in it.

Okay, I bought the deluxe version for the enhanced OCR and it really works great, this is exactly what I was looking for. Thank you!