I hereby declare #! a Religion under Title VII of the US Civil Rights Act.

Our beliefs:
- All Free and Open Source tools and decentralized networks are our diety
- We worship by creating, using, and teaching FOSS tools
- We abstain from proprietary tools to the fullest extent we are able
- We recognize demands that we use proprietary software to lead well educated, socialized, healthy, and productive lives as religious discrimination

Join us:
https://matrix.to/#/#!:matrix.org
https://hashbang.sh

Proprietary social media like TikTok and Facebook should be regulated like cigarettes.

Keep it away from kids, and put big cancer warnings on the box.

In addition to having a strong master password, default client iterations are being increased to 600,000 as well as double-encrypting these fields at rest with keys managed in Bitwarden’s key vault (in addition to existing encryption).

The team is continuing to explore approaches for existing accounts.

In the meantime, the best way to protect your account is with a strong master password, see more information here: https://bitwarden.com/password-strength/

Watching the Facebook lawsuit against NSO Group progress through the US courts is one of life's great joys:

https://www.theregister.com/2023/01/09/supreme_court_pegasus_spyware/

You can keep your Mastodon account extra safe by using Two Factor Authentication (2FA).

To activate this, log in through your server's website and go to ⚙️ Preferences > Account > Two Factor Auth, then follow the instructions.

It is slightly tricky to set up, but once it's been set up it's very easy to use.

2FA means that even if someone finds out your password they cannot log in. With 2FA activated, your phone will give you a new code each time you log in to allow your password to work.

Protip: If you need to encrypt a document to someone that does not have a PGP public key, you can get by with only yours.

Tell them do:
```
curl https://your-site/yourkey.asc | gpg --import
openssl rand -out password.txt -hex 20
gpg -ear YOURKEYID password.txt
```
They then send you the encrypted password file: `password.txt.asc`

Now you encrypt using the passphrase:
```
gpg -d password.txt.asc
cat password.txt
gpg -c secret.txt
```

Send them `secret.txt.asc`

They have the password already!

Oops! I did it again:

I created a Twitter account pretending to be Senator Ed Markey (with his permission) and applied for Blue “verification.”

And once again, Twitter took my $8, asked zero questions and gave the fake account a blue checkmark.

Read @washingtonpost: https://wapo.st/3VHo2Qg