>> Okay, which site was this? >The site it said it was? I'm sorry, but I have absolutely no idea what sites fall under the banner of the "FooBarBaz.NET" dark web data dump.
What is FooBarBaz.NET supposed to represent? The LinkedIn breach affected LinkedIn for example.
There's a bunch of high-impact leaks that had a rather inscrutable nickname - from the front page of https://haveibeenpwned.com/, I certainly wouldn't be able to tell what does being affected by a "Collection #1" breach mean, or "Exploit.In" or "Anti Public Combo List".
That said, HIBP specifically does provide that information which is more than actionable, and that being the most prominent of these services, I'm not so sure what the complaint is about really either...
I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we s…
> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I have my keepass vault in my dotfiles repository. All i need on any device is keepass and if i want to write to that vault, git. Of course i secured my publically accessible vault with a strong password and an additional token. Works fine for me but i have to admit, using a lot…
Good luck explaining the concept of a "dotfile" and "git" to a 6 year old, I guess...
Indeed. Stuff like this: > We would strongly recommend 1Password membership as that is going to provide the best experience is maddening. Do you guys really think we all just don't know what is going to provide the best experience? Because what will provide me the best experience is keeping it simple, not taking on an online dependency, and keep putting out standalone updates and platform ports, which I'd gladly pay…
I'm sorry it comes off that way. We don't mean any disrespect in the slightest. Your support over all these years means the world to us and we know darn well we wouldn't be here today without awesome customers like you. I left a comment just above yours that I invite you to read. I don't want to repeat it in its entirety here but suffice it to say we're excited about our hosted solution and yes we can find ourselves…
Ok, so go back through your forums and threads like these and read all the "how do I get standalone" questions throughout the last 5-6 years and tell me honestly that the awkward non-answers are just you guys being excited about your hosted solution. It's evasive. I'd feel a lot more mutual respect if you'd drop the charade and just say "yeah, you guys aren't really our primary use case anymore and we're not really planning to support you. Sorry." Making us read between the lines while you play coy games like saying "well, it's not advertised, but it kinda works on some platforms" is insulting.
Indeed. Stuff like this: > We would strongly recommend 1Password membership as that is going to provide the best experience is maddening. Do you guys really think we all just don't know what is going to provide the best experience? Because what will provide me the best experience is keeping it simple, not taking on an online dependency, and keep putting out standalone updates and platform ports, which I'd gladly pay…
I can certainly understand and appreciate your point of view. You are free to disagree with mine and I am sorry that it might come off the condescending, it is certainly not what any of us want to convey. However, we are also 1Password users and we build the product for ourselves. We are supporting millions of customers, several thousand support emails and tickets every day. And I am honest, the membership provides m…
My honest advice is to just make a clear statement that you're dropping standalone mode and do it. People with licenses can continue using their non-upgradeable versions as long as they want but they're not getting any more updates. That would be a lot less dishonest than pretending it's supported-ish and just hiding it deeper and deeper on every release.
I think the universe is slowly standardizing on WebAuthn/U2F for this. The US Government got rid of passwords in 2004 by switching to smartcards, and Google also did so in 2017 by switching to hardware security tokens.
That’s fine for tech businesses with dedicated IT support, but what about consumers?
It's slightly shocking how angry people get about companies going from one-time purchase to subscription. Like many software companies, 1Password made a business decision to focus on a subscription product. This strikes me as reasonable and naturally aligned with the customer expectation that this software be supported in perpetuity as OSes and browsers evolve over time. $5/month is not a crazy price to pay for a cri…
I've been thinking about this a lot about Adobe lately, specifically. I've been getting into video editing as a hobby, and the fact that I could use Premier for $20/month rather than the single time purchase of $800 or whatever it used to be is the difference between me being able to use it or not. And yeah, maybe in 40 months I would be spending more money, but there's no guarantee I wouldn't be spending money to up…
the fact that I could use Premier for $20/month rather than the single time purchase of $800 or whatever it used to be
Or you can buy DaVinci Resolve for $295 and get a lifetime license. And they make a Linux version.
As a standalone license customer for almost 10 years now, the constant responses like this and the deliberate non-answers on the forums really make me wonder how long I will continue to use 1password. I love 1password but I will not put my passwords in someone else's cloud. It's honestly pretty insulting that every time this comes up, someone from 1password pops in to talk down to your customers and push subscription…
Thank you for supporting us all these years! We wouldn't be here without awesome customers like you. As a long time user I bet you remember when we needed to write posts like Two Factor or not Two Factor[1]. > One and a Half Factors? Good times. :) Thankfully with our own service we are now able to provide real 2FA as our server is able to enforce it. Same with family sharing, team environments, automated backups, it…
For what it's worth, not a single one of those entries in the "no more" list appeals to me in any way. I've never complained that I lost my master password, or that the license didn't work on multiple platforms, or that I accidentally deleted my files. I don't feel the need for 2FA because -- and this is a big deal to me -- my password database isn't online. I know how to do backups. It's simple and self-contained. I can use it at work where policy prohibits online password management. I don't have to worry that I'm getting continuous "new features" updates that are going to change my working environment outside of my control (I can still roll back to v6.0 if I want). I don't like external dependencies. This is a much, much greater concern to me than the "niceties" you mention that literally bring me no value. So please, stop acting like you know better than your users. You may have the 90% case nailed but you're just pissing the rest of us off with your attitude.
> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I have my keepass vault in my dotfiles repository. All i need on any device is keepass and if i want to write to that vault, git. Of course i secured my publically accessible vault with a strong password and an additional token. Works fine for me but i have to admit, using a lot…
Good luck explaining the concept of a "dotfile" and "git" to a 6 year old, I guess...
Interesting: > 1Password for Linux also debuts with several features that are coming soon to 1Password for Mac, Windows, iOS, and Android That should be encouraging for Linux users. It suggests that the Linux version is not just a port that will forever at best follow the other platforms. It can get pretty annoying when you have something that is available on multiple platforms, and your platform tends to always lag…
1Password in Firefox unlocking the desktop app caught my eye. I'm on Mac and have to unlock 1Password in Firefox completely separately from the desktop Mac app.
No, but in all seriousness, I emphatically DO NOT UNDERSTAND the extent to which people place trust in external services to manage passwords. While I appreciate that they do have good skin in the game by being paid, etc -- your password storage on SOMEONE ELSE'S MACHINE fundamentally creates another huge attack vector/opportunity to screw it up, when they also must be accessed locally somehow. I appreciate it if you'…
Here's the mistake I made that made me decide to switch to 1password https://news.ycombinator.com/item?id=26801155 Also, depending on your phone, it might be significantly more secure against non-superpower actors.