i use a yubikey and still have the ability to type my LUKs password in. Yubikey is just more convenience: plug in and it auto type the password field. On Fedora this means it populates the field with asterisks. Still, i think using password is the best method.

With that said, i believe a much better secure layer is something similar to what Novacustoms, Purism attempt to do: verify if somebody else not you try to access the laptop. So far i know of only Dasharo boot and the stuff from Purism that can do these…

So the layout is: Boot verification -> LUKs-> your data

Or if you have the juices and powers: Boot verification -> LUKS -> QuebeOS dom0 -> choose your Quebess.

lots of people recommend bitwarden, but i am more at peace with an offline password manager that i control like Keepass. You can also go the GNU route and use “pass” on Linux too

Or use a physical key like Yubikey to login

look at title

shrug, another joke post maybe

look at community name

**Holy shit its real ! **

jump out the window

How long do you think it takes for those who still support him to… wake up?

This is not fucking normal.

It’s not even that nice when you abbreviate it:

Before: DOD = Dee Oh Dee. Has a nice flow

Now: DOW = Dee Oh Dup?