jslib VS bromite

Someone should tell them!

https://github.com/bitwarden/jslib/issues/52

To that extent, they're not going to bother trying to brute force the original password with aaaaaaa, aaaaaab, aaaaaac, etc. they'll start by going through the very publicly known word list and try abacus, abdomen, abdominal, etc.

FYI, according to the implementation notes in the .1pux importer pull request , the 1Password categories should be mapped to Bitwarden categories as follows:

In 2021, there was a PR (bitwarden/jslib#404) that changed it from 1 to 2 for local authentication. Server authentication still uses 1 iteration.

As a point of interest, there are 7,776 unique words in the word list. As such, each word provides log2(7776) ~= 12.92 bits security. So the 4 word phrase Bitwarden generates by default only provides ~51 bits security (your 3 word phrase about 38 bits).

The code you're interested in is here: https://github.com/bitwarden/jslib

Fixes and improvements to MykiCsvImporter by djsmith85 · Pull Request #707 · bitwarden/jslib (github.com)

Our goal with the Chromium provided in CalyxOS has been to provide a browser with a solid base of privacy and security enhancements vs Chromium (and by extension, vs Chrome) while still allowing most sites and WebView-based apps to function as expected out of the box. We do this by using select changes from Cromite (and prior to that, Bromite). Some of these include the under-the-hood deactivation of intrusive features and analytics, while others provide additional site settings to adjust features like WebGL and WebRTC, features which are sometimes necessary but which can aid in fingerprinting or identification when turned on. We also bring in the legacy ad blocker from Bromite/Cromite to offer some reasonable protection from the worst kinds of ads. You can find and adjust these features in Settings.

https://github.com/bromite/bromite Browser (based on Chrome)

Normally, I'd recommend Bromite as a lightweight Chromium-based browser with built-in adblocking, but the project appears to be asleep right now. It might be worth checking it in a few weeks, though.

Bromite via either its site/Fdroid, GitHub or Woolyss site has a bottom bar available in accessibility settings. (The first one has been unmaintained for a while, but has auto updates available if they ever drop. The other two are up to date but must be updated manually.)

Bromite hasn't been updated since December: https://github.com/bromite/bromite/releases

context: https://github.com/bromite/bromite/issues/2141