Live data from Hacker News

1Password for Linux

blog.1password.com

181–190 of 282 posts

Re: 1Password for Linux

#181
post #172

Earlier quoted context omitted.

Yeah, I think I completely agree with this. Nominally GTK (and I think Qt?) is designed with scripting language support in mind. They export a bunch of XML that can be used to generate bindings in other languages, but said XML is miserably documented and in practice it's basically impossible to leverage it (I recall various attempts at generating Go bindings and all ended in failure--it became apparent that it was ea…

I guess there are two different kinds of bindings. 1) Scripting language is still the driver of the application, it uses "bindings" against a GUI library to implement the application. This is the one I'm most interested in. And if you need low level stuff, you implement that as dll/so library and uses that from you scripting language. What usually happens is that you need to read the GUI library C or C++ code and exa…

> What usually happens is that you need to read the GUI library C or C++ code and examples to understand it, because the bindings documentation is not enough, and then translate that to your scripting language, can become a bit tedious with trial and error if it not obvious how to do it.

Yes, this is very true.

> XML as descriptive source sounds good in theory,

Agreed, and it could probably work in practice with enough investment (ideally forego XML altogether in favor of a markup language that isn't hostile to humans and machines, document the schema thoroughly, provide reference implementations, etc).

> I think I looked at Go-Qt binding but if I remember correctly it was alpha and had problems. Python-Qt exist but I don't know much about it. Read somewhere that I was just easier to use C++ directly, less hassle, don't know if that is true.

Yeah, the Go-Qt binding was just incomplete. There was a Go/QML project early on, but I don't think it allowed for data to flow both directions, which seriously limited its utility and then it just kind of faded into obscurity. Pyqt (there was a competing Python/Qt binding as well, but I forget what it was) was okay, but again it didn't have very good documentation and it would still segfault all the time. One or both of the Python/Qt bindings were also poorly supported.

> Vala looks like a nice solution if you want to go full GTK.

I tried this as well, but it's a thin veneer over GObject and still has many of the same problems. It also lacks any kind of build tooling or package management, and again, it's not adequately invested in and the documentation is poor (or this was the case when I last tried it).

> I think for Gnome and other desktops that uses this technique, it is in the right direction, but the quality of the plugins I have used is most of the time poor, memory leaks etc, you end up using just use the approved ones if you don't like to restart your desktop once a day. If that is because of poor bindings or poor plugin implementations I don't know.

Agreed.

Re: 1Password for Linux

#183

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we s…

I think we should move away from passwords entirely, the UX for that is often much better for users (and as a bonus, you don't need to worry about your password being compromised, or password managers).

Re: 1Password for Linux

#184
post #141

Earlier quoted context omitted.

This comment by me was wrong, sorry everyone. They’re NOT doing stupid crazy things.

> They do not say that they do not decrypt your entire vault into browser memory, because they do. I am sorry but this is just wrong. I have close to 6,000 items in my 1Password across family and business accounts. Loading everything into memory all the time would be ridiculous.

I agree, but I was under the impression that the vaults were encrypted as a whole, but according to the security white paper that changed at some point. So you can decrypt individual passwords. So I’m happy and am in the process of correcting my comments. Sorry.

Re: 1Password for Linux

#185
post #148
post #129

Earlier quoted context omitted.

GUI toolkits suck on all platforms. It's just a hard problem and its a boring, loveless space to work in.

They are quite alright on Apple and Microsoft platforms.

I've heard this as well. I think it can be done, but it's probably not an easy effort and it doesn't seem to lend itself to teams of volunteers.

Re: 1Password for Linux

#186
post #89

Earlier quoted context omitted.

Thanks for the kind words! Glad to hear it is working out. We have beta support for mutual unlock of the Linux app and browser extension so you can unlock in the browser using your fingerprint. You can check it out here: https://1password.community/discussion/120745/a-better-way-t... - Ben, 1Password

Just a warning for people who don't know the parent is referring to the extension formerly called 1Password X (now just 1Password in the browser because AgileBits wants you to use that one) which puts ALL OF YOUR PASSWORDS into your browser's memory.

This statement by me was incorrect and based on the belief that they still encrypted vaults as a whole, but they’ve moved on to encrypting individual passwords so they can be decrypted individually and my whole concern was unfounded. I can’t edit that comment anymore, probably took too long. But it is wrong.

Re: 1Password for Linux

#187
What's the password recovery process like with 1Password for family accounts?

I'm the administrator for my family's account on LastPass and my wife forgot her master password and has now burned the associated email.

The account was unused and empty so nothing was lost but it highlighted to me that account recovery was not smooth or seamless. As an administrator you can't just issue a password reset on their behalf.

If you're testing out these password managers, try a recovery first with a burner account before fully entrusting them with valuable passwords.

Re: 1Password for Linux

#188
post #61

Earlier quoted context omitted.

Correct. For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using pass on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.

Yeah... Will it also suggest me my passwords in iOS? Come on, guys, 1Password is not only about syncing passwords between N computers.

Actually, yes, there's an open source "Pass for iOS" app.

Not that I recommend this setup though.

Re: 1Password for Linux

#189

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we s…

I think we should move away from passwords entirely, the UX for that is often much better for users (and as a bonus, you don't need to worry about your password being compromised, or password managers).

What is the alternative you propose?

Re: 1Password for Linux

#190
post #41

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we s…

Bitwarden https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)

Bitwarden is a great option. It has all the features you could need, and is cheaper (and critically has a free plan). That's basically my default recommendation for most people. I know most people won't consider anything other than free.

I still choose to use 1Password personally, because the higher polish and experience is worth the slightly higher price for me.

Both are good options really.

Post reply on HN