this post was submitted on 09 Nov 2025
35 points (87.2% liked)

TechTakes

2287 readers
79 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago
MODERATORS
top 36 comments
sorted by: hot top controversial new old
[–] self@awful.systems 13 points 2 days ago (1 children)

gonna have to start cleaning up some of the posts from the more long-winded assholes with opinions that aren’t more complex than “well I trust them to not let the technology known for creating security vulnerabilities run wild on their codebase, because they made the exact same promises every other project makes when they go all-in on slop”

for a fucking password manager of all things

[–] self@awful.systems 11 points 2 days ago (1 children)

like god fucking damn what did keepassxc do that made all these little fuckers pledge allegiance to it? what about this mediocre blog post is convincing? did y’all miss the context that this post is accompanied by a bunch of posts on other official keepassxc accounts where they give incorrect and potentially dangerous information in defense of their use of LLMs?

[–] emma@mathstodon.xyz 2 points 3 hours ago

@self At this stage I think it's ideological: the software world's equivalent of a big rolling-coal truck.

[–] JFranek@awful.systems 7 points 2 days ago (1 children)

I have no opinion, but I have to note that I keep reading "KeepAssXC ..."

[–] dgerard@awful.systems 2 points 3 hours ago
[–] frank@sopuli.xyz 11 points 3 days ago (1 children)

I double down on Yikes.

Why not just use KeePass instead? I think it's different and AI free

[–] e8d79@discuss.tchncs.de 8 points 3 days ago (3 children)

There is no official support for Linux and I am pretty sure that the browser plugin is windows only. I liked the browser integration of KeePassXC but I will probably need to say goodbye to that feature as nothing else supports that on Linux. GNOME Secrets looks OK as an alternative.

[–] frank@sopuli.xyz 4 points 2 days ago

https://keepass.info/help/v2/setup.html#mono

It says it supports Linux now, though I admit I haven't tried it yet

[–] CompactFlax@discuss.tchncs.de 4 points 2 days ago* (last edited 2 days ago)

Pwsafe isn’t as sexy but it does the basic job - password safe.

[–] Forester@pawb.social -1 points 3 days ago (1 children)
[–] e8d79@discuss.tchncs.de 6 points 3 days ago (1 children)

There is an unofficial mono port available but it looks like ass and, since it also can't do autofill in my browser, it has no benefits over GNOME Secrets.

[–] Forester@pawb.social 6 points 2 days ago* (last edited 2 days ago) (1 children)

I'd never trust the browser to have direct access ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯ i copy paste

[–] rook@awful.systems 4 points 2 days ago

That’s a funny thing to say. The communication channel between the browser and whatever external password store can be made as restricted as you like… keepassxc and its browser api let you restrict which credentials are offered to the browser, and can let you manually OK each request, for example. It doesn’t need unrestricted read access.

The bitwarden browser plugins are a bit more dubious though, because they communicate with a remote password store with more limited controls, and their enthusiasm for trying to store passkeys and totp hashes is definitely worth avoiding.

[–] hendrik@palaver.p3x.de 9 points 2 days ago* (last edited 2 days ago) (1 children)

Lol. How is that doubling down? That's what we concluded two days ago in the discussion over at !fuck_ai@lemmy.world from what they did in the previous months. And now they confirm it is in fact like that... And... I mean it's not a secret. They're actually pretty transparent with it and the statement matches almost exactly what they've been writing in their Github repo for some time now. I mean we might not like what they do. But I really don't see how they double down on anything here.

[–] self@awful.systems 9 points 2 days ago (1 children)

it’s only a double down if it’s a kfc sandwich where the bread is replaced by chicken. i see no chicken sandwich here, alleged posters, unlike in fuck ai where it’s chicken sandwiches all day

[–] otter@lemmy.dbzer0.com 6 points 3 days ago (1 children)

Bitwarden it is, then. 🖕🏼

[–] e8d79@discuss.tchncs.de 19 points 3 days ago (2 children)
[–] dgerard@awful.systems 12 points 2 days ago

sticky note under the keyboard

[–] otter@lemmy.dbzer0.com 2 points 2 days ago

What is, then?

[–] traches@sh.itjust.works 2 points 2 days ago (2 children)

I’m a full time professional developer and I have been banned from /r/vibecoding for pointing out that it doesn’t work, so hopefully I have a little credibility here. The keepassxc team’s take here is very reasonable and not that far from my own.

LLMs do make decent first-pass code reviewers, and they can handle boilerplate code and simple changes given sufficient instruction and provided you review the results. They are trash at anything more complicated than that.

[–] self@awful.systems 8 points 2 days ago

hopefully I have a little credibility here.

LLMs do make decent first-pass code reviewers

hahahaha nope

[–] Architeuthis@awful.systems 6 points 2 days ago

I feel the devs should just ask the chatbot themselves before submitting if they feel it helps, automating the procedure invites a slippery slope in an environment were doing it the wrong way is being pushed extremely strongly and executives' careers are made on 'I was the one who led AI adoption in company x (but left before any long term issues became apparent)'

Plus the fact that it's always weirdos like the hating AI is xenophobia person who are willing to go to bat for AI doesn't inspire much confidence.