Live data from Hacker News

1Password for Linux development preview

discussions.agilebits.com

171–180 of 352 posts

Re: 1Password for Linux development preview

#172
post #18
post #2

Ooh boy. This is amazing. The horrible Linux support they had was the reason I left 1Password. This might make me go back to 1Password.

So sorry we scared you away! Linux has been on our radar for a while but our biggest challenge was finding a way to share code between apps without writing everything in C++. Thankfully we found Rust, a systems language built around efficiency and safety. From there we were able to build the common core we've always dreamed of and were off to the races. Please give us another chance and let us know what you think. <3

> without writing everything in C++

That sounds interesting. Can you list the major technical reasons behind this decision? Also interesting will be if you could explain how Rust addressed those pain points (I have read about the general advantages that Rust has over C++, but interested in hearing how it plays out in the wild).

Re: 1Password for Linux development preview

#173

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative.

Unless I'm mistaken, 1Password no longer ephemerally decrypts passwords as needed and only while used and then scrubs the memory. [1, old but still] The excuse, if I remember it, was that garbage collected languages made this challenging. Even so, there is some irony in them moving away from the temporary, one-at-a-time, scrubbed approach just before all of the side channel attacks that allowed leaking memory across processes became widespread.

[1] https://nakedsecurity.sophos.com/2019/02/21/password-manager...

Re: 1Password for Linux development preview

#174

Earlier quoted context omitted.

Yes. Not against Electron but maybe I'm underestimating the ui/ux complexity of a password manager since I have never use one.

More likely it is the overhead of multiplatform support that motivates them to use Electron. Their support matrix is pretty big now: iOS, Android, Web, Mac, Windows, browser extensions, Chrome OS, and Linux

Amiga, Atari, Mac OS, MS-DOS, Windows, UNIX, with teams that reached around 10 maximum.

How did we ever managed without Electron?!?

Man we were 1337!

Re: 1Password for Linux development preview

#175

Earlier quoted context omitted.

The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron?

> The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron? Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. GTK nor Qt have that type of UI elements, they are obviously HTML elements stylized with CSS. Another hint is in the files contained inside the Debian package used during the Linux installation [2]: root@3cb1637b3070:/# ap…

So another application to ignore. React Native can't kill them all soon enough.

Re: 1Password for Linux development preview

#176

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

It's made with proper craftsmanship and care on the Mac (which is primarily where I've been using it for years). The Windows client is much better after the last major release, but it's never been as slick as the Mac version (the biggest wart now is the system tray/browser extension popup). 1Password X looks nice until you try and use it, and all the company reps on the forums are very argumentative about any feature…

They were also pretty dismissive of Linux for a long time, so it's kind of funny to hear it as one of their biggest requests. 1Password X narrowly prevented me from switching for a while, but I've come to see alternatives as generally better options. Yeah, they're not as flashy, but I think Bitwarden and Keepass XC do a great job.

Keepass XC may even be doing a better job at security. At least in some dimensions.

https://keepassxc.org/blog/2019-02-21-memory-security/

Re: 1Password for Linux development preview

#177
post #14
post #9

Unfortunately this only works with hosted 1Password (as far as I can tell), there doesn't seem to be any support for self hosted vaults. Can Roustem or anyone else from 1Password team clarify this? This was the precise reason I switched to BitWarden 6 months ago, needed a solution where my passwords didn't leave my network.

I'm no Roustem but I'm close. :) You're right, 1Password for Linux integrates tightly with the 1password.com service and as such does not support local vaults.

I am another linux user that uses local file syncing, so I guess I will have to use the old 1password 4 for windows build forever ha.

Re: 1Password for Linux development preview

#178

I’ve been using 1Password every day for over 11 years now. The oldest passwords I’ve got stored are for Twitter and Dropbox (yes, the passwords have been changed but the records were first created in 2009). It’s one of those apps which has been made with proper craftsmanship and care, so while I’m not a Linux user, I’d have no problem recommending based solely on Agilebit’s reputation.

Apparently that craftsmanship went astray with the adoption of Electron.

Re: 1Password for Linux development preview

#179

Earlier quoted context omitted.

If talking to a typical person I wouldn’t assume they would stick with a method like pass, or a synced keepass file (methods I like just fine personally.) UI affordances and multi-device convenience aren’t just fun, they make good security easier for people who are tired or in a hurry.

PassFF gives me a UI affordance (password dialogs on web sites in my Firefox get an icon, and context UI menus to auto-fill from pass) and I automatically synchronise the git repo to an Android phone that likewise has affordances. They're nicer in some alternatives like 1password but they aren't absent in the pass ecosystem and of course I can customise these as I prefer (indeed one of my patches is landed in PassFF…

Yes, it’s not that they don’t exist, but more that the burden is on the user to be aware of them, implement consistently on all devices and perform a degree of maintenance. Generally, speaking about users in aggregate, that is less conducive to good security practices in the long run than one nice, maintained piece of software with multiple clients and a team keeping sync running well. There’s a meta-affordance to consider, if you will.

Re: 1Password for Linux development preview

#180

Earlier quoted context omitted.

But why a whole electron app just to store passwords?

Why shouldn't it be Electron? Should it be GTK? Why not QT? Linux doesn't have a standard desktop environment or widget toolkit. Electron doesn't seem like a worse choice than the other options, and it's easy to find engineers who know how to work with it. 1Password doesn't just store passwords. It has a bunch of other features. It's a fairly complex app at this point. It also has fairly similar user experiences in W…

I have been coding UIs since 1992, how did we managed to pull it off in a more heterogeneous computing world without Electron, I wonder.

PWAs and Web Widgets I can stand behind, Electron is just laziness at the expense of the user.

Post reply on HN