CyberRage

Not relevant at all.

Good artists and animators are very hard to find. It is about culture more than anything. Japan is the problem.

The issue is not with anime but with Japan.

Most "anime" is being created in Japan(That's the literal definition of anime) hence the issue.

You don't hear about starving Pixar animators or Disney artists overworking to extreme levels.

This is part of the Japanese culture. Moreover, I would say that anime is having more difficult time making profit and being sustainable.

Anime profits are actually quite low compared to other similar content.

Actually you already have something like this. MPGe is used across EV and ICE vehicles alike.

Fuel is far more energy dense for ICE engines are far far less efficient.

I don't get this comparison point as well, electronics is dwarfed compared to other far more energy intensive industries.

As I've mentioned, when retrieving the vault other parameters need to match like Account name, Email etc.

You can add 2FA to the authentication process.

All metadata is obviously encrypted, the data is just a single blob. you maybe could try to guess the number of entries based on size but that's too dynamic as well.

These products were attacked before, decrypting the vault wasn't how they were attacked.

It was with bugs\vulnerabilities within the browser extensions that lead to data leaks. something else entirely.

There's no issue with that. layman users won't modify these settings while advanced users will be warned.

You're thinking wrong.

Encryption\Decryption are done locally. the server has no clue what your master-key is, all it knows here's a blob of data you need to store, here's my "ID"(The secondary key generated which is different from the encryption key and also relies on the master-key and other parameters).

When retrieving the vault, the program will generate the secondary key, provides it to the server(You can add 2FA btw), the server sees that indeed it matches one of the ID's and sends you back the encrypted vault. decryption is done locally.

I don't see any issue with this process, maybe you care to point the attack vector\scenario

Nono. the master-key never leaves the device.

Via the master-key, the program derives(locally) the key to encrypted the data and a different secondary key for authentication against the server. without knowing the master-key you can't decrypt the vault even if you were able to trick the server into sending you the vault.

The vault is decrypted locally

Offer the user the choice for other solutions with a performance penalty?

Choice is always better. for people who care\worry, they can change to something more resistant to cracking.

Are you serious? Even something that would be considered "bad" argon2 set-up is far better than anything that is based on SHA256.

Modern GPUs and ASICs can perform millions of SHA operations per second, even with a poorly configured Argon2, you reduce that massively.

These cloud based solutions perform hashing+salting+KDFing locally and then add additional compute cost on the cloud level.

I don't see any issues with that.

Israel vaccination speed is not only due to price. Israel was the first to order vaccines even before any published results. Israel is geographically small and has medium-low sized population which helps in logistics and effectiveness.

I think there was a lot of skepticism in Europe initially regarding the vaccine while in Israel the demand was very high from the get-go.

In short, yes. There was a massive drop in elderly people developing COVID-19 symptoms but an increase in younger people.

The vaccination rate at younger individuals is far lower than elder ones, also the vaccine created a false sense of safety for everyone.

Well he's not wrong. traffic is far more than perfectly configured TLS.

DNS, SNI and mixed content are all insecure for the vast majority of users. You can learn a lot from HTTPS traffic.

There are definitely lots of miss-conceptions about VPNs and some ridiculous claims by VPN providers for things like security or malware protection.

Still VPNs can be useful to access content\networks that otherwise you can't.

As for privacy, it comes down to trust. You mentioned HideMyAss but other services have good track record, far better than most ISPs that publicly state they share information with 3rd parties.

It seems like you don't understand the main advantage of these types of security tokens.

Rogue trigger of a security token isn't really an issue when using the recommended U2F standard.

U2F uses the domain as part of the challenge-response in U2F so that phishing\spoofing attacks can be defeated.

While post notes offer natural resistances to any non-physical threats, they lack the comfort and usability of having your password on your PC.

Assuming someone has access to the host, dumping passwords or keylogging them isn't very hard, therefore defeating the whole point.