For iOS devices the most up to date client is "Strongbox". I don't think it is FOSS, but is compliant with the standard. It's sadly a freemium app, but is quite well made in my testing. It cannot sync with syncthing, but does support several cloud services, its own service (which uses iCloud), and local file transfer over LAN. They also have a version of the app with all network connectivity removed for security (if you prefer)
Whooping_Seal
This is perhaps overkill, but you can also encrypt the contents of your online cloud storage with CryFS / Cryptomater. This is particularly useful if you wish to store sensitive documents (healthcare, finances etc) in a cloud environment in case of catastrophic destruction of property (destroying computers / on site backups of data).
In this case you can also backup your keepass file in this encrypted virtual storage medium, on top of the prexisting encryption of the database itself.
My personal choice right now is KeePassXC (PC) / KeePassDX (Android) + Syncthing And Aegis (Android) for 2FA codes, with a yubikey for services that support FIDO keys.
Overall I like this setup because it's decentralized and does not rely on a third party server structure. The only "weak" point would be the Syncthing relay servers or the Tailscale VPN that I use, but this goes back to ensuring encryption of the database is adequate with a long password, and using an open source synchronization protocol that ideally has been vetted by a trusted third party (or yourself if you're capable)
I used to use Bitwarden, and I highly recommend it. I really appreciated it's ability to integrate with email aliasing solutions to generate new aliases from within the bitwarden UI itself. However, my main reasons for switching were the following
- I don't have the money to pay for it (uni student)
- I prefer a more self-hosted approach (I will consider using vaultwarden in the future when I have more money)
- I wanted to move away from using a browser extension for password management on desktop. KeePass' auto type feature is really good, and a more secure input method than a browser extension autofill.
The only additional advice I have for both recommendations is that I do not think it advisable to add Totp 2fa information to your password manager even if it supports it. I feel like this should be separate, on a single device, and backed up in ~2 locations (one preferably off site). This is really to avoid problems if a device is compromised and if your password manager is compromised, but this is definitely in the more unlikely category I feel.
My only major issues with keepass are the potential for sync conflicts and the some feature differences between platforms. A centralized server config like vault/bitwarden prevents the sync conflict issues, at the cost of having one point of failure. The feature differences problem isn't too great, but autotype doesn't work on Linux if you install with flatpak, and you can't prevent screen capture of the app on Linux (only on Android and Windows from my understanding)
Edit: I also tried gopass, it's really fun to have an entire CLI based password manager, but frankly the state of mobile companion apps are appalling. The Android option only is good if you use a dev version, and the iOS one I thought was just ok. I also dislike the metadata leaking that is inherent to the format, and that PGP is the main form of encryption for the time being (some clients were looking at using AGE at some point). Overall it's a cool but flawed concept, and I feel my other two recommendations are superior.
I like having the app because I have my browser set to auto delete all cookies etc upon close, the app will stay logged in unlike the website. I know that I'm in the minority on this one however, most people likely don't have their browser set to do that.
I think it's important to see these types of efforts, while I'll never go out and buy a MacBook the effort isn't wasted since it gives current users more freedom and future people buying used laptops more options for Linux compatible hardware.
Without a project like this, that hardware will end up being e-waste a lot sooner than it should be, when Apple drops support. At least to me I see an ethical and moral imperative for projects like this, but I also understand people's grievances with Apple.
Quel est ton avis sur les médias franco-canadiens en termes de livres, de films et de séries? J'ai suffisamment de journaux canadiens francophones, mais j'ai eu plus de mal à trouver d'autres médias de qualité, même avec des amis franco 🫠
English
Do you have any recommendations for French canadian media in terms of books, movies and tv? I have enough newspapers, but I've found it harder to find good other media even with franco friends
I don't think denying American platforms / content creators their money is a real solution, the american content being an integral part of Anglo-Canadian culture is the real issue at hand.
I mean we do have can-con regulations, but arguably their implementation is lacking and at least for the film industry seemingly supports foreign films filming in Canada more than it supports domestic films.
There also even is a whole question of what even constitutes Canadian content, should we only include things that are substantially about Canada or Canadians? Or is it enough for it to be made in Canada / by Canadians.
I also know at least for some sectors it's even harder than others. E.g anglo Canadian drama / théâtre is always going to have issues because we have grants for domestic non-profit grassroots productions, but the big anglo-theatre houses are expensive enough that it's mostly going to be American stuff coming :/
It's disheartening but I don't see an easy solution, but I do hope we at least try to make steps in the right direction in the coming years.
I might make the plunge soon as my desktop is just slightly too old—but, at the same time, I need Windows for a few things for work so it's a little frustrating 🫠
Gaming wise I'm completely able to use Linux, but I also don't really play competitive games with anti-cheat so it is not exactly surprising.
I think you summed up my thoughts on the matter much better than I could have. In particular, the “digital” / “corporate” right to be forgotten is distinct and much more specific in its scope than a broader right, and is a rather important consumer protection in my opinion.
Do you have a separate computer that you can use to do a “test run” of using Linux? If not, I would at least play around with Linux in a virtual machine before committing to the bit (and I say this as someone who has been using Linux laptop / Windows desktop for 6-7 ish years now)
If you don't mind me asking, what makes gnome more adaptable in terms of functionality than KDE?