Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1password is considering a self-hosted option to store vaults

1password.community

Post reply on HN
Print view View original

151–160 of 228 posts

Re: 1password is considering a self-hosted option to store vaults

#151

Post by shephardjhon »

ebiester wrote: post #95
Terretta wrote: post #83

Earlier quoted context omitted.

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

I agree to the payment. I disagree to the subscription model. I absolutely would try to hook users on any SaaS. However, I go out of my way to avoid such products. If I can pay for them once, I much prefer it. (For something like jetbrains, I'm okay with a renewal fee because if I choose not to pay it, I can still use the older version.) I make an exception for Bitwarden because I like the idea of my password manager…

But in cyber security based software woulden't you need constant updates against new exploits? In something like Fusion 360 or Matlab or office I agree, if you dont need new features you shoulden't pay for updates.

Re: 1password is considering a self-hosted option to store vaults

#152

Post by Tempest1981 »

627467 wrote: post #137
Terretta wrote: post #83

Earlier quoted context omitted.

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

I'm surprised by these sweeping assumptions of what the HN audience is. > relatively well-paid profession earning good wages from creating software AFAIK 1password doesn't practice location-based pricing, so how can you assume that "relatively well paid" people from different geographies of the world can all find it affordable?

Probably a general assumption that a the cost of software is a tiny fraction of the cost of food/housing/transportation, regardless of occupation.

Re: 1password is considering a self-hosted option to store vaults

#153

Post by staticassertion »

Terretta wrote: post #83
AnonC wrote: post #13

They made the standalone license almost impossible to find and get, forced a subscription on users, and made the password vault storage online for the subscriptions. Now this self-hosting survey comes as a surprise, and it would be of some relief if/when it’s implemented. I do wonder how the licensing and pricing will be handled though. Bitwarden officially allows self-hosting for the personal use tiers, but it seems…

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

> For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance.

Yep! People see open source as a goal, rather than a sustainable product being a goal.

Re: 1password is considering a self-hosted option to store vaults

#154

Post by LordDragonfang »

wowwtfattheend wrote: post #136
Terretta wrote: post #83

Earlier quoted context omitted.

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

> Not to mention the exercise of ethnocentric privilege implicit in demanding something of quality in exchange for nothing assured. Whoa! Knowing nothing about the OP you assume that he is the member of the oppressing class clamoring for the output of his slaves? And, since you're writing this in English, I think it's safe to guess you're assuming the person you're attacking is a white, so you're basically accusing t…

https://en.wikipedia.org/wiki/Ethnocentrism

Specifically:

>In common usage, it can also simply mean any culturally biased judgment.

Also relating to the "Global North" (who it's very likely that any given poster here belongs to) and "Global South", which don't have anything to do with skin color.

Given you've created a throw-away to comment this, I suspect you know you're actually the one making a "weird escalation" and are aware that you're race-baiting in a non-genuine manner.

Re: 1password is considering a self-hosted option to store vaults

#155

Post by handrous »

aikinai wrote: post #36
microtonal wrote: post #5

Semi-related: this survey was announced alongside 1Password 8 for Windows early access. Apparently 1Password 8 for Windows uses Electron and there was some discussion about AgileBits wanting to move to the same architecture on all platforms. Does anyone know if 1Password 8 on macOS will also be an Electron app? Their Linux Electron app is pretty good and definitely much better than having no 1Password at all. However…

Thanks for the warning about this. I was already disappointed in the direction 1Password has been taking, and moving to Electron would certainly be the last straw. It’s totally reasonable that they want to cheap out on the actual software and expand their business into more lucrative services, but it’s not what I personally want in a password manager. So hopefully someone else, maybe a lone develop that doesn’t need…

I find I have to kinda budget how many electron apps I keep around, to keep things running smoothly. And that's assuming they're all halfway, sorta, well-written. That goes double for anything I might want to leave open, or open frequently. It also applies to "web app" tabs in my browser (even Gmail eats shitloads of memory and spikes CPU usage all the time for mysterious reasons, let alone things like Google Docs, and a bunch of SaaS dashboards are as bad or worse).

If an app is Electron, it gets an extra and fairly rigorous level of "do I need it? What are the alternatives?" treatment, for this reason. Native, or even QT, doesn't get that kind of in-advance scrutiny, since only rarely do they cause any problems, even if I forget about them and leave them on in the background for months.

Re: 1password is considering a self-hosted option to store vaults

#156

Post by colordrops »

YPPH wrote: post #100
colordrops wrote: post #92

Earlier quoted context omitted.

I thought Bitwarden is open source. Is it not a standard license? Can you not fork it and change its behavior?

It's $10 per year. Is it really worth your time forking it to remove licence checks, when you could instead support the developers and not need to make any code changes? Forking the code and removing licencing checks is perfectly permissible under the GPL. But it's pretty unreasonable in this case.

I don't disagree with you, but I was asking about the following:

> but it seems to have some license purchase requirements even for the self-hosted options

which doesn't appear to be completely true, regardless of whether you think it's worth your time or or reasonable.

Re: 1password is considering a self-hosted option to store vaults

#157

Post by nucleardog »

ValentineC wrote: post #142
nucleardog wrote: post #103

Earlier quoted context omitted.

For a whole class of potential (if unlikely) situations, it shifts from me potentially being caught up in a mass hack, response to an overly broad warrant, etc to needing be targeted specifically. Passphrase compromised? If they're hosting, you know exactly where to go to access my passwords. If I'm hosting, I can tell you that I use 1Password and my master password and I'm still _relatively_ safe in that you don't e…

> Passphrase compromised? If they're hosting, you know exactly where to go to access my passwords. If I'm hosting, I can tell you that I use 1Password and my master password and I'm still _relatively_ safe in that you don't even know where to find a copy of my password database. The above argument seems to turn out the same even for cloud-synced vaults. If Dropbox suffered a massive hack, the malicious actor could ta…

Absolutely. We can kinda diffuse that risk out though if we have these files across a bunch of different services (some use OneDrive, some use AgileBits, some use Dropbox, etc).

Would we be better off if instead of one company like Equifax having _everyone_'s information, we had a company per state?

That all said, I actually self-host my (now KeepassXC because 1Password's push to cloud) databases on my own hardware, so for me it's truly a solution.

Re: 1password is considering a self-hosted option to store vaults

#158

Post by tornato7 »

shephardjhon wrote: post #149
Terretta wrote: post #83

Earlier quoted context omitted.

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

There is a lot of merit to free software and open spurce spftware but in this or other cyber security cases, I would prefer a paid option that makes it clear where the devs are getting thrir money from. If it is free, than the user is the product.

Indeed, just see the hundreds of popular free chrome extensions that sold out to adware/malware providers because they were offered $$$

https://www.bleepingcomputer.com/news/security/-particle-chr...

Re: 1password is considering a self-hosted option to store vaults

#159

Post by gokhan »

paulryanrogers wrote: post #97
dawnerd wrote: post #65

Earlier quoted context omitted.

Just to add another data point, I’ve been with them since almost day one and every interaction I’ve had has been very nice. They even got my data out of a backup when something weird happened when switching from a business to family plan. (I might be a weird edge case since my account shows as both family and business a custom domain).

If they can get your data out then do they have access to your keys?

Most probably encrypted data out of a backup for you to use after unlocking.

Re: 1password is considering a self-hosted option to store vaults

#160

Post by tornato7 »

Spooky23 wrote: post #119
Terretta wrote: post #83

Earlier quoted context omitted.

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free? For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance. // Pre-emptive “edit” before this comment has replies: Folks post a lot of argument…

With 1Password, the subscription is really expensive, and I’m afraid that the bloat the company is stuffing into the product is weakening the security. Frankly, they make too much money. I’ve found enough bugs in the Mac product that I assume there are security issues I’m not aware of.

I have the 1password family plan which I share with four others, collectively we pay a whopping $1/mo each.
Post reply on HN