Live data from Hacker News

Getting 1Password 7 ready for the Mac App Store

blog.agilebits.com

271–280 of 484 posts

Re: Getting 1Password 7 ready for the Mac App Store

#271
post #146

The reason I won’t go for a subscription is because I don’t want to find myself locked out of my password manager if I stop paying the subscription. With IntelliJ (JetBrains) I get perpetual fallback and that makes me super comfortable with a subscription model. Will AgileBits offer perpetual fallback? I doubt it. Their product works well but their marketing team are a let down.

You do not lose access to your data when you stop paying for the subscription. It switches to read-only mode.

Re: Getting 1Password 7 ready for the Mac App Store

#272

Earlier quoted context omitted.

So if the app were open source and the maintainers decided to abandon it, are you going to download the code and keep it updated? If it is forked are you going to trust the new maintainers? Are you going to audit the source code?

This is the big fallacy I see whenever someone uses open source just because the source code is public. Unless you're able to perform a full audit yourself, is it really any better than a closed offering like 1Password?

I suppose the theory is that open source is better (a) because you can audit it if you want to, and (b) it's more likely that someone out there has audited it.

In practice, (a) falls apart if the user doesn't have the knowledge, experience, or time necessary to perform an audit, which is quite likely for security software. And I feel like (b) isn't great either, as there are plenty of examples of major flaws in open source projects that went undetected for long periods - heartbleed is just one example.

Re: Getting 1Password 7 ready for the Mac App Store

#273
post #53
post #4

Good timing that I moved all my passwords from 1Password to Emacs and GPG one year ago. It’s a pity; I’ve been a very happy customer for a long time, had licenses for multiple machines and was happy enough to pay for the updates. But my data shall be my data, again. I’m not paying for an app that I regularly have to buy an upgrade for and which doesn’t give me the opportunity to hold my data locally after explicitly…

People keep bringing this up, and it feels like a major failure of Agilebits marketing approach. The subscription service changes the frequency at which you pay Agilebits; it does not mandate how you store your data. 1Password 7 continues to allow all the kinds of local/Dropbox/etc vaults that prior versions allowed. If somebody at Agilebits is reading this thread: look around at these comments. The lack of clear inf…

I understand where you are coming from and we thought about advertising this feature.

However, it would not be the best option for most of the customers. They would have to understand how to take care of local vaults, including syncing, backups, etc. It is really an advanced feature for very technical audience.

Re: Getting 1Password 7 ready for the Mac App Store

#274
post #53

Earlier quoted context omitted.

People keep bringing this up, and it feels like a major failure of Agilebits marketing approach. The subscription service changes the frequency at which you pay Agilebits; it does not mandate how you store your data. 1Password 7 continues to allow all the kinds of local/Dropbox/etc vaults that prior versions allowed. If somebody at Agilebits is reading this thread: look around at these comments. The lack of clear inf…

I think it is likely that they want to hide this option, as they have hidden the standalone version. I think their long-term plan is to have everyone on their subscription with data stored in the 1Password cloud. This reduces support and development load (no need to support local/Dropbox/Wifi sync with all its edge cases) and guarantees montly/yearly payments.

The support and development load is indeed much higher when it comes to standalone vaults. There is an infinite number of scenarios out of our control when it comes to Dropbox and WLAN sync. Several times in the past we had support inbox at over 10,000 emails waiting for response.

If AgileBits was VC-funded then we would have to drop standalone vaults, no doubt. It is a good thing that we are not. We do care about our long-time customers and will provide standalone vaults for as long as there is demand for them. Just please do not ask us to make it a default option.

Re: Getting 1Password 7 ready for the Mac App Store

#275

Earlier quoted context omitted.

Your passwords are stored on their server. You'd have to compile and run your own server, which is more expensive than the $1/month they're asking for.

> You'd have to compile and run your own server, which is more expensive than the $1/month they're asking for. For people like me that already rent a VPS for their mail and website the marginal cost is $0 except for the time it would take for me to perform the installation and setup. If the system is good and stable then the "cost" of the time that I would spend installing it on my server would be close to $0 when di…

I think another plus of buying their service is your supporting development of the software and saving yourself time, while a critical piece of your security software remains open source.

Re: Getting 1Password 7 ready for the Mac App Store

#276

1Password for Mac and iOS worked flawlessly. But I recently migrated to Windows and installed 1Password 6 for Windows. It's just bad software. It's not responsive (I'm pressing "Save" and it works for a second or two, while I'm expecting it to respond instantly), it has some obvious UI bugs, but worse of all, it crashes very often, I don't remember a single program that crashes so much. It just feels very unpolished.…

I am sorry to hear about the bad experience with 1Password 6! I was using 1Password 7 beta for the past few months and it worked well, we hope to release it in a few days.

If you have a problem, please do not hesitate to send us an email or live a message in our discussion forum: https://discussions.agilebits.com/

We do our best to reply to every message in 24 hours

Re: Getting 1Password 7 ready for the Mac App Store

#277

Earlier quoted context omitted.

This is the big fallacy I see whenever someone uses open source just because the source code is public. Unless you're able to perform a full audit yourself, is it really any better than a closed offering like 1Password?

I suppose the theory is that open source is better (a) because you can audit it if you want to, and (b) it's more likely that someone out there has audited it. In practice, (a) falls apart if the user doesn't have the knowledge, experience, or time necessary to perform an audit, which is quite likely for security software. And I feel like (b) isn't great either, as there are plenty of examples of major flaws in open…

I agree with that assessment, but how many vulnerabilities have been found in closed sourced software? If the software is popular enough, someone somewhere is going to find a vulnerability whether it's open or closed source. Look at all of vulnerabilities that Google has found in closed sourced software. It just takes more skill to find vulnerabilities and incentives. The black hats have found vulnerabilities in iOS that Apple still hasn't managed to patch - like the one that lets law enforcement break into a locked iPhone and bypass the fail login attempts.

Re: Getting 1Password 7 ready for the Mac App Store

#278
post #54

I hate subscription models but with 1PW 7 I would have to pay +40 € for each the Mac and the Windows version and still have not access to new features like the travel mode or the CLI client. AgileBits seems to be an honest company and they went the extra mile to backport some new features (TOTP) to their dated 1PW 4 codebase. I will give them the benefit of the doubt and try their subscription and should they ever tu…

Thank you, @hs86. We will not let you down!

Re: Getting 1Password 7 ready for the Mac App Store

#279

Earlier quoted context omitted.

Interesting in that you can host your own instance of their cloud server, but I really prefer something that uses standard cloud storage mechanisms (Dropbox, iCloud, etc.) for sync and works on top of that. Like others here, I'll probably be reevaluating my choice when it feels like it's time to upgrade. For me, some of the open source solutions are perfect as far as the underlying storage format and sync technology,…

It's simple enough to do with some version of KeePass. I'm currently using https://keeweb.info/ and Keepass2Android.

What do you use to fill browser login/passwords? There seem to be so many plugins for keepass

Re: Getting 1Password 7 ready for the Mac App Store

#280

Earlier quoted context omitted.

For me, something related: can I remove the data in a usable form? 1Password makes that easy, so like others here, I'm happy to pay them to perform the 'eternal vigilance' that secret-keeping entails.

For now...

Removing the ability to get your own passwords out of your password management utility that you paid for would be corporate suicide.
Post reply on HN