• 0 Posts
  • 22 Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle


  • I use a synced kbdx file on Linux (keepass-xc) and Android (KeePassDX) daily with the same keepass file. It handles all my logins, TOTP, passwords, passkeys no problem. I synchronize it using syncthing. When the two machines are on the same WiFi (or on a meshed VPN like tailscale) and can talk to each other, they sync freely.

    I know someone who has it set up the same way who also uses Windows in the mix.

    I haven’t checked the code, but it seems the writes the file is not actively being held open for reading and writing, with constant updates happening, updates appear to be transactional. I’ve only ended up with two sync errors in 3 years of daily syncing and I was able to merge the two files with the keepass-xc cli merge options.

    The key distinction here is the program keepass-xc is not keepass the standard, just a program for reading the kbdx vault. A really good, externally audited, well coded, security first program for reading the vault!

    If you’re concerned about the sync, it might be worth checking out how the original program expects DB sync to be done.

    If you’re concerned about the manager working across os’s, don’t be. The primary use case, in the browser, is cross-platform by way be being a browser add-on. The brains of the operation are bundled in the keepass-xc app as a local server that only gets enabled when you switch on browser integration in the manager. The browser add-on sends web addresses to that server, and then the manager looks up the response, and sends back the correct credential. This interchange is encrypted during the pairing process.

    On Android, KeePassDX hooks in to the built-in passwords, passkeys, and accounts ‘preferred service’ and offers password autofill in the keyboard suggestions bar, and comes with a credential-fill keyboard you can switch to on the fly if needed. It also saves passwords in normal apps, by storing the app id in the credential under a custom field ‘AndroidApp’ to help narrow down hinting. E.g. com.hjiansu.thunder for my Lemmy app, or com.android.settings for WiFi SSIDs and PSKs.




  • Some of it is dark if you sit thinking about it too long. The toaster has a nightmare about choking it’s master with smoke, forks being stuffed in it, and falling in to a full bath. I wouldn’t have thought any of this is scary for a toaster, rather it shows a preoccupation with its master somehow committing suicide with it.

    On the flip side, my three year old just watched it, and is now obsessed. We’ve watched it 5 times this week. She loves it - even the “It’s a B movie show” song.











  • The right way is some sort of inline water flow sensor, so it’ll trigger within seconds of you turning on the shower to warm it up. With an esp32 and a sensor, and some clever use of the sleep function, it’d probably last a year or so on a couple of AA’s.

    Low effort and price tech is probably better in a wet environment though! If you just want the mood lighting, get a wireless button and stick it somewhere near. Tap it on, tap it off!

    If you want to feel that automatic magic, consider a cheap battery powered temperature sensor. If you fix the chassis to the shower head pipe it’d probably be accurate enough. Also, assuming you need to wait for your shower to heat up, you’d have a pretty good idea when your shower was hot too - when it triggers your automation for the lights!

    Just make sure the sensor polls often enough or can be made to report on a significant temperature difference in a timely fashion. Something like this might do it: https://sonoff.tech/products/sonoff-zigbee-temperature-and-humidity-sensor-snzb-02p

    Also avoid WiFi for buttons, connection and addressing takes ages and sicks for an instant response needed for something like lighting changes


  • tl;dr:

    If you think something is blocking DNS traffic, you could try configuring DNS-over-HTTPs or DNS- over- TLS and picking a reputable upstream. This should obfuscate the traffic somewhat and get past common DNS interference issues and tactics.


    So building on what yourself and everyone else has said, it does seem to be a DNS issue.

    I found that at select times my local ISP was up to shenanigans with DNS.

    I live in a very small country and work in IT. The NOC for all three ISPs and I have met. It would surprise me if they were competent enough to do this intentionally for malicious purposes.

    If you can get access out to the internet via ping, see if you can do other things - get on a VPS and test with tcpdump at both ends. There’s a few free ones or trials great for disposable purposes like this. Set it up in advance…

    You won’t know what it is til you troubleshoot.

    I’ve had huawei firewalls reaching some simultaneous connection limit and fail, reversing their ruleset - blocking everything except ICMP, tr069 and ssh (concerning) outbound…

    I’ve had problems with specific DNS servers, through the ISP’s network.

    I’ve seen regular BGP changes causing outages all over the place (the ISPs locally don’t peer with each other…)

    Post your findings, would love to help/hear!