Browse Source

feat: add profile

restructure
Garrit Franke 4 years ago
parent
commit
564104ad01
  1. 2
      components/Header.js
  2. 27
      components/Profile.js
  3. 8
      content/posts/whom-do-you-trust.md
  4. BIN
      public/me.jpg

2
components/Header.js

@ -1,4 +1,5 @@
import Link from "next/link";
import Profile from "./Profile";
export default function Header(props) {
return (
@ -7,6 +8,7 @@ export default function Header(props) {
<Link href="/">
<h1>{props.siteTitle}</h1>
</Link>
<Profile></Profile>
</nav>
<style jsx>
{`

27
components/Profile.js

@ -0,0 +1,27 @@
import Link from "next/link";
export default function Header(props) {
return (
<header className="header">
<img src="/me.jpg"></img>
<h2>Garrit Franke</h2>
<p>Random tips, tricks and thoughts about software</p>
<Link href="https://garrit.xyz">Website</Link>
<br />
<Link href="https://github.com/garritfra">Github</Link>
<br />
<Link href="https://www.linkedin.com/in/garritfranke/">LinkedIn</Link>
<style jsx>
{`
img {
width: 12rem;
}
Link {
margin: 1rem;
}
`}
</style>
</header>
);
}

8
content/posts/whom-do-you-trust.md

@ -11,7 +11,7 @@ Nowadays, password managers are a necessity if you care even the slightest about
Use a **stateless** password manager like [LessPass](https://lesspass.com/) to access your password without relying on a third party to store your data.
### Why use a password manager in the first place?
## Why use a password manager in the first place?
Having a single password for multiple accounts is convenient. What's also convenient, is **using** this password on multiple accounts once you have access to a single one. What might be convenient to you, might also be convenient to others. Many people, [especially celebrities](https://web.archive.org/web/20170225163642/http://uk.businessinsider.com/twitter-says-it-wasnt-hacked-passwords-reused-older-hacks-malware-to-blame-2016-6), fall victim to this trap of comfort.
@ -23,11 +23,11 @@ The problem that most likely arises from this technique is called _password chao
The aim of a password manager is [to solve this problem by storing all of your passwords in a single place and securing it with an _ultra secure superpassword!_ (©)](https://www.businessinsider.com/how-to-use-password-manager-store-protect-yourself-hackers-lastpass-1password-dashlane-2017-2?r=DE&IR=T). This way, you can use arbitrary passwords - preferebly gibberish that doesn't make sense to humans (nor machines) - without losing them, as long as you have your _ultra secure superpassword!_ (©) - aka your masterpassword. The benefits are obvious: You get rid of the password chaos problem while staying relatively secure. Eventhough password managers are quite benificial, some people (including myself) see a catch in them.
### Relying on a third party
## Relying on a third party
Relying on third party companies doesn't seem like a big deal. After all, you are probably using some form of cloud service to host your photos. Yet there's a lot of trust involved in letting others handle your private data, especially your passwords. In 2017, [a major password manager got hacked, exposing sensitive data including users and their passwords](https://www.zdnet.com/article/onelogin-hit-by-data-breached-exposing-sensitive-customer-data/). This shows the potential for security breaches in an application that inherently seemed safe. But what if I told you that there is an alternative to this? A password manager that does not store your data at all?
### A Stateless password manager
## A Stateless password manager
Recently, I stumbled across [LessPass](https://lesspass.com/#/). LessPass is a password manager that is very different from what I have seen so far. Instead of storing passwords that either you or a random password generator came up with, it computes passwords on the fly, given a website, username, your masterpassword and some options.
@ -35,6 +35,6 @@ Recently, I stumbled across [LessPass](https://lesspass.com/#/). LessPass is a p
The key here is that LessPass uses a **pure function**, i.e. a function that given the same parameters will always give the same result. Using this technique, there's no need to store your password in a database owned by a large company, nor do you have to sync your passwords between your devices ([but there's an app](https://play.google.com/store/apps/details?id=com.lesspass.android&hl=de)). The computation happens right on your machine, and **only** on your machine. If you want to find out more about how it works under the hood, you can check out [the authors blog post](https://blog.lesspass.com/lesspass-how-it-works-dde742dd18a4#.vbgschksh). He goes into great detail on what alorithm is used to compute your passwords and how to utilize every feature of LessPass.
### Conclusion
## Conclusion
Being a little privacy nerd myself, I often think twice about what services I want to use, often even looking into self-hosted alternatives to major products. There are multiple products that offer self hosted solutions to store your passwords, however I also don't even trust _myself_ with such sensitive data either. LessPass eliminates the need to have a third party watch over your data, let alone to store it on their servers.

BIN
public/me.jpg

Binary file not shown.

After

Width:  |  Height:  |  Size: 734 KiB

Loading…
Cancel
Save