It’s not worse than any other self hosted system, the fact your vault is on every device might be useful if you don’t have a connection, but IMO it doesn’t really add any value in terms of backup.
I’m glad the option exists, but I don’t self host and pay Bitwarden €12 per year. For that price I can’t set up a more reliable system than they can even if I would consider my time free
If you don’t do off-site backups there’s no recovery from your house burning down.
Exactly my point and exactly the opposite of what you said earlier.
What do you mean? If my house burns down the chance all my devices went up in flames is high. This is one of the reasons I’m not self hosting Bitwarden.
Unless your phone also burns down together with the house, which is not unlikely
And Buddhist symbols 卍 卐
The user land API/ABI is stable to a fault in Linux. The kernel API/ABI is unstable
It’s the other way around. The kernel API stable to a fault, the kernel ABI isn’t. If your application only relies on the kernel API you won’t have many compatibility issues. If you rely on userland stuff such as C++ stdlib, GTK, QT, Python, … Good luck.
Version numbers are meaningless. Yes it’s mostly fixes, but in every release which doesn’t have p in the version number there’s at least two or three things which are not fixes. As late as 2023 one of those changes did introduce a local privilege escalation: https://www.wiz.io/vulnerability-database/cve/cve-2025-32463 which was undetected for two years. For a critical piece of software with the maturity of sudo, I call that pretty concerning.
Here’s an interesting report from Google about rust vs C++ in Android: https://security.googleblog.com/2025/11/rust-in-android-move-fast-fix-things.html?m=1
I would say yes is it developed, this is more than just big fixes : https://github.com/sudo-project/sudo/releases
No huge changes of course, but the big CVE from July was only introduced 2 years ago.
My biggest question is, why is something like sudo still developed and not finished and in maintenance mode?
Sudo is being actively developed and has several fairly recent CVEs, some of which are memory issues (at least recent compared to how old sudo is). Apart from being memory safe rust is also better at error handling than C.
IMO best would be to reduce attack surface by using a memory safe language and also reducing complex features like OpenBSD’s doas does.
https://www.cvedetails.com/vulnerability-list/vendor_id-15714/Sudo-Project.html?page=1&order=3
And Putin has them
I’m realistic and know I won’t do it any better than Bitwarden. I could make regular backups of my vault and store them on different locations. That won’t hurt, but I also have a life.
If you trust them so less, do you trust them to write software which won’t silently your data? Do you have several offsite backups at different locations? Do you test your backups?