this post was submitted on 09 Nov 2025
35 points (87.2% liked)

TechTakes

2296 readers
70 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago
MODERATORS
top 37 comments
sorted by: hot top controversial new old
[–] self@awful.systems 15 points 1 week ago (1 children)

gonna have to start cleaning up some of the posts from the more long-winded assholes with opinions that aren’t more complex than “well I trust them to not let the technology known for creating security vulnerabilities run wild on their codebase, because they made the exact same promises every other project makes when they go all-in on slop”

for a fucking password manager of all things

[–] self@awful.systems 13 points 1 week ago (1 children)

like god fucking damn what did keepassxc do that made all these little fuckers pledge allegiance to it? what about this mediocre blog post is convincing? did y’all miss the context that this post is accompanied by a bunch of posts on other official keepassxc accounts where they give incorrect and potentially dangerous information in defense of their use of LLMs?

[–] emma@mathstodon.xyz 5 points 1 week ago

@self At this stage I think it's ideological: the software world's equivalent of a big rolling-coal truck.

[–] frank@sopuli.xyz 11 points 1 week ago (1 children)

I double down on Yikes.

Why not just use KeePass instead? I think it's different and AI free

[–] e8d79@discuss.tchncs.de 8 points 1 week ago (3 children)

There is no official support for Linux and I am pretty sure that the browser plugin is windows only. I liked the browser integration of KeePassXC but I will probably need to say goodbye to that feature as nothing else supports that on Linux. GNOME Secrets looks OK as an alternative.

[–] frank@sopuli.xyz 4 points 1 week ago

https://keepass.info/help/v2/setup.html#mono

It says it supports Linux now, though I admit I haven't tried it yet

[–] CompactFlax@discuss.tchncs.de 4 points 1 week ago* (last edited 1 week ago)

Pwsafe isn’t as sexy but it does the basic job - password safe.

[–] Forester@pawb.social -1 points 1 week ago (1 children)
[–] e8d79@discuss.tchncs.de 6 points 1 week ago (1 children)

There is an unofficial mono port available but it looks like ass and, since it also can't do autofill in my browser, it has no benefits over GNOME Secrets.

[–] Forester@pawb.social 6 points 1 week ago* (last edited 1 week ago) (1 children)

I'd never trust the browser to have direct access ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯ i copy paste

[–] rook@awful.systems 5 points 1 week ago

That’s a funny thing to say. The communication channel between the browser and whatever external password store can be made as restricted as you like… keepassxc and its browser api let you restrict which credentials are offered to the browser, and can let you manually OK each request, for example. It doesn’t need unrestricted read access.

The bitwarden browser plugins are a bit more dubious though, because they communicate with a remote password store with more limited controls, and their enthusiasm for trying to store passkeys and totp hashes is definitely worth avoiding.

[–] hendrik@palaver.p3x.de 9 points 1 week ago* (last edited 1 week ago) (1 children)

Lol. How is that doubling down? That's what we concluded two days ago in the discussion over at !fuck_ai@lemmy.world from what they did in the previous months. And now they confirm it is in fact like that... And... I mean it's not a secret. They're actually pretty transparent with it and the statement matches almost exactly what they've been writing in their Github repo for some time now. I mean we might not like what they do. But I really don't see how they double down on anything here.

[–] self@awful.systems 10 points 1 week ago (1 children)

it’s only a double down if it’s a kfc sandwich where the bread is replaced by chicken. i see no chicken sandwich here, alleged posters, unlike in fuck ai where it’s chicken sandwiches all day

[–] JFranek@awful.systems 8 points 1 week ago (1 children)

I have no opinion, but I have to note that I keep reading "KeepAssXC ..."

[–] dgerard@awful.systems 2 points 1 week ago
[–] otter@lemmy.dbzer0.com 6 points 1 week ago (1 children)

Bitwarden it is, then. 🖕🏼

[–] e8d79@discuss.tchncs.de 19 points 1 week ago (2 children)
[–] dgerard@awful.systems 13 points 1 week ago

sticky note under the keyboard

[–] otter@lemmy.dbzer0.com 2 points 1 week ago (1 children)
[–] voidmoth4@woof.tech 1 points 1 week ago

@otter @e8d79 i know of psono and aliasvault as bitwarden/keepassxc replacements. anyone know if they are reliable? #passwordmanager #passwordmanagers

[–] traches@sh.itjust.works 2 points 1 week ago (2 children)

I’m a full time professional developer and I have been banned from /r/vibecoding for pointing out that it doesn’t work, so hopefully I have a little credibility here. The keepassxc team’s take here is very reasonable and not that far from my own.

LLMs do make decent first-pass code reviewers, and they can handle boilerplate code and simple changes given sufficient instruction and provided you review the results. They are trash at anything more complicated than that.

[–] self@awful.systems 9 points 1 week ago

hopefully I have a little credibility here.

LLMs do make decent first-pass code reviewers

hahahaha nope

[–] Architeuthis@awful.systems 6 points 1 week ago

I feel the devs should just ask the chatbot themselves before submitting if they feel it helps, automating the procedure invites a slippery slope in an environment were doing it the wrong way is being pushed extremely strongly and executives' careers are made on 'I was the one who led AI adoption in company x (but left before any long term issues became apparent)'

Plus the fact that it's always weirdos like the hating AI is xenophobia person who are willing to go to bat for AI doesn't inspire much confidence.