Live data from Hacker News

Firefox Lockbox

testpilot.firefox.com

61–70 of 156 posts

Re: Firefox Lockbox

#61

Has anyone done a thoughtful comparison of PW managers? I moved on from keepass because it was a huge hassle to use, but LastPass and 1password both have some detractors as well.

I paid a one time license fee of 1Password, then I use it offline on laptop and iPhone. I sync them through wifi regularly. This offline use option is not very disclosed on the website but it’s possible and in my opinion it’s more safe. I’ve tried open source password apps but the problem it’s they are all from independent developers. These developers can’t afford security reviews and I can’t tell if the version on t…

I'm using 1password the same way as you are. Their linux support is poor though.

Re: Firefox Lockbox

#62
post #38

I am curious how it works, technically speaking. I already have this capability with password-store (pass), that works for Firefox, Chrome and Safari on destop and mobile. pass - https://www.passwordstore.org (core program) passff - https://github.com/jvenant/passff (firefox desktop) passforios - https://mssun.github.io/passforios (ios w/firefox mobile) qtpass - http://qtpass.org (osx, linux, windows)

OpenKeychain and Password-store (paired with a yubikey) is the entire reason I use Android over iOS. I really wish there was hardware GPG key solution for the iphone.

Cause it works great and even supports TOTP and extra data, aside from passwords.

Re: Firefox Lockbox

#63
post #38

I am curious how it works, technically speaking. I already have this capability with password-store (pass), that works for Firefox, Chrome and Safari on destop and mobile. pass - https://www.passwordstore.org (core program) passff - https://github.com/jvenant/passff (firefox desktop) passforios - https://mssun.github.io/passforios (ios w/firefox mobile) qtpass - http://qtpass.org (osx, linux, windows)

OpenKeychain and Password-store (paired with a yubikey) is the entire reason I use Android over iOS. I really wish there was hardware GPG key solution for the iphone.

Did you see it's missing a maintainer?

I agree, using gpg on yubikey for password encryption is ideal. My only problem with it is that nobody makes money, so who is maintaining it?

Re: Firefox Lockbox

#64
I've been working on this distributed offline-first datastore that uses the Git protocol as the network layer. I'm calling it GitDB (but the Git trademark is getting more strictly enforced these days so that'll need to change).

The idea is that we should be able to build tools where the user can understand and manage where data is stored while at the same time keeping many of the conveniences of modern apps, like cross-device sync.

As a user, you can decide if you trust Github, Gitlab, Bitbucket, etc. and pay them to host your data.

The first tool I wanted to build with GitDB was a password manager but seeing this post made me wonder if there would be enough people who wanted this level of control over data, does this sound like something you'd be into?

This work is all super early, but would love to gauge the interest from others.

If someone wants to help build this thing: https://github.com/the-gitdb-cooperative/gitdb

Re: Firefox Lockbox

#65
post #12

The iOS app seems to be region-locked to U.S. only App Store.

Only for now. This is just the beginning of an experimental product and we're hoping to bring it far and wide later. Other than "every", what language or regions would you want/expect/need first?

All English speaking countries would be a good start for (almost?) zero effort on Mozilla's part.

Re: Firefox Lockbox

#66

I've been working on this distributed offline-first datastore that uses the Git protocol as the network layer. I'm calling it GitDB (but the Git trademark is getting more strictly enforced these days so that'll need to change). The idea is that we should be able to build tools where the user can understand and manage where data is stored while at the same time keeping many of the conveniences of modern apps, like cro…

I hope it only uses normal git stuff, so that I can selfhost it too on my laptop or on my computer at home as I do with my private git repos?

Re: Firefox Lockbox

#67
post #66

I've been working on this distributed offline-first datastore that uses the Git protocol as the network layer. I'm calling it GitDB (but the Git trademark is getting more strictly enforced these days so that'll need to change). The idea is that we should be able to build tools where the user can understand and manage where data is stored while at the same time keeping many of the conveniences of modern apps, like cro…

I hope it only uses normal git stuff, so that I can selfhost it too on my laptop or on my computer at home as I do with my private git repos?

Yep, just pure git, it's nothing fancy on that front.

Re: Firefox Lockbox

#68
Are Firefox passwords encrypted on the client? I currently use (any pay for) Bitwarden and I like that the code is open and my data is encrypted on the client and only synced with the server. I'd like a similar service from Mozilla, but don't know how the encryption is handled.

Re: Firefox Lockbox

#69

I've been working on this distributed offline-first datastore that uses the Git protocol as the network layer. I'm calling it GitDB (but the Git trademark is getting more strictly enforced these days so that'll need to change). The idea is that we should be able to build tools where the user can understand and manage where data is stored while at the same time keeping many of the conveniences of modern apps, like cro…

Pass (https://www.passwordstore.org/) uses git as a password database in a similar way.

Re: Firefox Lockbox

#70

Are Firefox passwords encrypted on the client? I currently use (any pay for) Bitwarden and I like that the code is open and my data is encrypted on the client and only synced with the server. I'd like a similar service from Mozilla, but don't know how the encryption is handled.

Yes, they are encrypted on the client.

https://blog.mozilla.org/services/2014/04/30/firefox-syncs-n...

https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...

Post reply on HN