Viewing profile — jik

Some days I agree with you. Some days I don't.

I mean, she spelled my name wrong to. She spelled her own email address differently in two places. Attention to detail does not appear to be this person's strong suit.

I've been poking the internet bear for over 30 years. That's quite obvious if you read the other articles on my blog. I'm not one to back down from a fight when I think someone is …

I mean, "mark as spam" is basically "burn before read," which is what I did to him. The difference, I guess, is that I told him I was doing it, because, like I said before, I think…

The user's suggestion wouldn't actually solve the problem the user wanted solved. If there are scheduled messages queued to be sent when Thunderbird starts up, then Send Later send…

Wow, out of all the things I've written on my blog, _this_ makes it onto the front page of HN. How droll. BTW, just to be clear, I wasn't the one who posted the link here. I don't …

In this day in age it is common for a two-year-old SaaS startup not to have an office. I mean, I suppose it's possible that they have one, but my assumption is that the entire comp…

This is informative: https://opensource.com/article/18/3/behind-scenes-bitwarden My impression is that Kyle cares more about spending time writing software than about hyping his co…

Google and Github both built their U2F support for Firefox before WebAuthn was released, and as you've pointed out, the U2F support in Firefox is gated out by default. Presumably G…

I've added Zoho Vault to the comparison grid.

We didn't use the word "comprehensive", "complete", or "thorough", and obviously we didn't include every password manager in our evaluation, so I'm not sure what reason you have to…

>More bugs and the support was horrible. ^^^Yes, this. In 2018, we reported nine different substantive security holes to LastPass. At least two of them were security issues. All of…

Yes, my initial evaluation was flawed because I was looking at the free version of Bitwarden, but supports neither U2F nor attachments, but the evaluation grid said that it didn't …

There is substantial functionality which is only available in the native app, not in 1Password X, and therefore completely unavailable on Linux. If the 1Password X claims that its …

LastPass doesn't have a native app because it doesn't need one -- when the browser plugin and web vault are working properly, they provide all available functionality on every plat…

You're correct that the Linux support for 1Password is severely lacking, which is why I called that out in my evaluation. LastPass, on the other hand, is in a different category. I…

We did not set out to evaluate every single password management product. We set out to evaluate the products which where enough "in the ballpark" of what our company needed that th…

It was a cosmetic, not a security-critical bug, so there's really no reason why it needed to be released right away. Also "a few days" was just a guess. I noticed that it was a pro…

https://github.com/bitwarden/web/issues/303#issuecomment-446...

Your "facts" may be correct, but they actually have nothing to do with the article linked above. The article linked to above isn't about voting machine hacking, it's about voting w…