Live data from Hacker News

1Password for Linux development preview

discussions.agilebits.com

151–160 of 352 posts

Re: 1Password for Linux development preview

#151
post #105

Earlier quoted context omitted.

They've absolutely crippled 1password to make local vaults as difficult to buy and use as possible. They don't roll out updated versions as often, many versions don't get support for local vaults for years, they make it nearly impossible to buy the non-subscription version, and you can no longer upgrade older licenses to use new versions. Their entire business model is really sleazy and they've gone out of their way…

> Every company that has moved to a subscription and cloud-based product has essentially traded a one time $30-50 license to getting that (or more) every year, and the product is usually inferior from my experience. Two mild counterpoints: (1) While "from my experience" is always definitionally anecdotal, most applications that I'm aware of that have moved to (or started with) a subscription-based model have released…

Subscription model forced on a local password manager customer? A little sleazy.

Re: 1Password for Linux development preview

#152

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

It's made with proper craftsmanship and care on the Mac (which is primarily where I've been using it for years).

The Windows client is much better after the last major release, but it's never been as slick as the Mac version (the biggest wart now is the system tray/browser extension popup).

1Password X looks nice until you try and use it, and all the company reps on the forums are very argumentative about any feature request (look for the pushback they give about resizing their super-cramped browser extension popup—and the issues with hires screens stemming from how they built it, which assumes a fixed size).

I've also got a chip on my shoulder about the "feature" they added that showed the most recently used websites in the iOS app with no way to disable it (they finally allowed setting the number to zero months later). The reps on their forums all come off with this attitude of "this is the best way, and you're wrong if you don't like it" for just about every issue that comes up.

I like the app and will continue to use it, but if my main platform wasn't macOS/iOS I would have bailed long ago.

Re: 1Password for Linux development preview

#153
post #57

Earlier quoted context omitted.

...why? Of all possible target audiences it would seem Linux users would be the least receptive to this kind of thing. Forgive my bluntness, but to me this looks like you're just testing forced adoption of 1password.com hosted SaaS on a platform you don't really care about before rolling out the same to Mac & Windows. Which would be unfortunate.

I can't speak for them, but it's my impression from using 1Password for a good few years (both the local-vault product, and then the "account" subscription service) that local vaults are basically deprecated, even though they work fine. They're just not a good way for AgileBits to make money. So they'll keep them working in the software for existing customers who paid for them and expected them to work; but they won'…

One day they will stop supporting it... They will give notice and ask you to use the online version.

Re: 1Password for Linux development preview

#154
When one day AgileBits removes non-subscription sync from iOS and Android, I'll have to move to a new password manager. Currently I use syncthing for inter-computer syncing, Dropbox for the phones (iCloud too at one point).

Frustrating how difficult it was to install the iOS version without a subscription, I even wrote an article to save others the confusion: https://www.davidschlachter.com/misc/1password-ios-standalon...

Re: 1Password for Linux development preview

#155
post #118

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

> It’s one of those apps which has been made with proper craftsmanship and care Is it? I've been using it for sometime as well but it seems like there is a lot of room for improvement. E.g: - Support for unlocking via Watch ID on the Mac. - Currently on iOS when searching for a password within an app, if a site prefix is included that doesn't match what's in 1Password the list will just show no results, with no way t…

[deleted]

Re: 1Password for Linux development preview

#156

Earlier quoted context omitted.

But the reasonable comparison wouldn't be "a plain text file" it would something like Jason Donenfield's pass ( https://www.passwordstore.org/ ) Now, there are some potential usability improvements they can offer by giving the passwords to "some company" but there's a serious price (not only financial) to pay for that. Also, because it's designed as a standard Unix tool if you're comfortable in Unix (as we may suppos…

If talking to a typical person I wouldn’t assume they would stick with a method like pass, or a synced keepass file (methods I like just fine personally.) UI affordances and multi-device convenience aren’t just fun, they make good security easier for people who are tired or in a hurry.

PassFF gives me a UI affordance (password dialogs on web sites in my Firefox get an icon, and context UI menus to auto-fill from pass)

and I automatically synchronise the git repo to an Android phone that likewise has affordances.

They're nicer in some alternatives like 1password but they aren't absent in the pass ecosystem and of course I can customise these as I prefer (indeed one of my patches is landed in PassFF so I no longer run a fork)

Re: 1Password for Linux development preview

#158

Shower thought: An online password manager is equivalent to password reuse, because there's one password behind all your passwords.

Not really because the most common reason your password is leaked is some online service leaked it, not someone hacked your machine and found it.

In that scenario they would only have your single site password and not your master key.

Re: 1Password for Linux development preview

#159

Earlier quoted context omitted.

But why a whole electron app just to store passwords?

Why shouldn't it be Electron? Should it be GTK? Why not QT? Linux doesn't have a standard desktop environment or widget toolkit. Electron doesn't seem like a worse choice than the other options, and it's easy to find engineers who know how to work with it. 1Password doesn't just store passwords. It has a bunch of other features. It's a fairly complex app at this point. It also has fairly similar user experiences in W…

Because Electron bundles (light) chrome and nodejs and all deps breaking desktop integration and security (the developers are now responsible for checking vulnerabilities in all bundled libraries and they are not doing it).

Those are pretty good reasons not to use electron.

Re: 1Password for Linux development preview

#160

Earlier quoted context omitted.

The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron?

> The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron? Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. GTK nor Qt have that type of UI elements, they are obviously HTML elements stylized with CSS. Another hint is in the files contained inside the Debian package used during the Linux installation [2]: root@3cb1637b3070:/# ap…

> Yes, it is very obvious from the screenshot that it’s built on top of Electron [1].

I love this. It was my first reaction when I used MS Teams ... shit, it's electron and the I got the horrible user experience as usual. And in MS Teams even the font and its rendering is hardcoded and the devs are refusing to do anything about this! So when I use MS Teams I need to look at blurry text.

EDIT: And they bundle libffmpeg.so too .... let's have a look at what version, though I guess 1password is not a good attack vendor as it'd be hard for the attacker to control input data, right.

Post reply on HN