1Password for Mac Moving to Electron • Hacker News Board

Re: 1Password for Mac Moving to Electron

#21

Post by mcyukon » Wed, Aug 11, 2021, 4:35 PM UTC

This is the second time that 1Password Co has done something that I consider a negative... The first one being them "hiding" the standalone version purchase link. Doesn't give me much faith in their future plans which seen to be all about change for changes sake and extracting as much money out of customers as possible.

That being said BitWarden uses Electron and Angular for their desktop apps as well.

Re: 1Password for Mac Moving to Electron

#22

Post by Ansil849 » Wed, Aug 11, 2021, 4:38 PM UTC

Could someone give a bird's eye view summary of why 1Password moving to Electron is bad? Are there documented security risks, or is it more just a UX/UI aesthetic issue?

Re: 1Password for Mac Moving to Electron

#23

Post by rvz » Wed, Aug 11, 2021, 4:42 PM UTC

bgentry wrote: post #5

The most disturbing part about this is that their support team has been misleading people on Twitter all morning, not truthfully answering straightforward questions about whether the app is Electron: https://twitter.com/1Password/status/1425429965747720200 https://twitter.com/1Password/status/1425470169133031435 https://twitter.com/1Password/status/1425476888072495111

It has been painfully admitted that they are moving to Electron. Mentioning 'It's using Rust' doesn't make it any faster or efficient since at the end of the day, it is going to be slower regardless. This tweet by a user called _cprecioso is priceless of the reaction on 1Password's move to Electron. [0]

[0] https://twitter.com/_cprecioso/status/1425429383880318980

Re: 1Password for Mac Moving to Electron

#24

Post by threatofrain » Wed, Aug 11, 2021, 4:48 PM UTC

bgentry wrote: post #5

The most disturbing part about this is that their support team has been misleading people on Twitter all morning, not truthfully answering straightforward questions about whether the app is Electron: https://twitter.com/1Password/status/1425429965747720200 https://twitter.com/1Password/status/1425470169133031435 https://twitter.com/1Password/status/1425476888072495111

I kind of don't understand why customer support would answer customer questions that way — Oh my, did you just a question about Electron? Because I swear you asked about our RUST BACKEND. Let's talk more about that.

Re: 1Password for Mac Moving to Electron

#25

Post by _moof » Wed, Aug 11, 2021, 4:49 PM UTC

bgentry wrote: post #12

newman314 wrote: post #10

Earlier quoted context omitted.

I'm curious to see if they have finally killed off standalone. I've been a 1Password user for years but have staunchly resisted going to their subscription model because I want my data local. It's infuriating that 1Password has steadily downplayed standalone versions to the point where it's almost impossible to find.

They have, the removal of a standalone option was also part of this announcement.

Wait, really? This seems like a buried lede.

Re: 1Password for Mac Moving to Electron

#26

Post by pjmlp » Wed, Aug 11, 2021, 4:49 PM UTC

Oh well. Thankfully I only use at company issued laptop.

Re: 1Password for Mac Moving to Electron

#27

Post by wdb » Wed, Aug 11, 2021, 4:51 PM UTC

That's disappointing. Maybe I should give Secrets or Bitwarden a shot now.

Wondering if they will refund my outstanding balance into cash

Re: 1Password for Mac Moving to Electron

#28

Post by hs86 » Wed, Aug 11, 2021, 4:52 PM UTC

1Password and the Tower git client were somewhat similar: They started on native Mac first and years later introduced a native Windows version that lacked behind in features and polish.

1Password for Windows slowly(!) caught up, and even after all this investment, they decided that going for a web-based UI across all desktop OSes is the better solution.

Tower did not change this: Their Windows version is still lacking, and I am still confused by their website about which features are Mac-only and which are also on Windows.

Are they in a better position now for sticking with native apps? I stopped using them and moved to GitKraken that has the same UI across OSes. It is not as pleasing as that mature macOS version of Tower, but it is still better than constantly switching between an awesome and a "meh" app.

Maybe cross-platform consistency is more important than having one main attraction and multiple sideshows.

Re: 1Password for Mac Moving to Electron

#29

Post by whitepoplar » Wed, Aug 11, 2021, 4:54 PM UTC

Ansil849 wrote: post #22

Could someone give a bird's eye view summary of why 1Password moving to Electron is bad? Are there documented security risks, or is it more just a UX/UI aesthetic issue?

Memory bloat, for one.

Re: 1Password for Mac Moving to Electron

#30

Post by ripply » Wed, Aug 11, 2021, 4:54 PM UTC

rcarmo wrote: post #11

bussierem wrote: post #4

Earlier quoted context omitted.

Highly recommend trying BitWarden! I'm a paying user of it myself. It also has export of data and full self-hosted options as well. The browser plugins work amazingly well. The phone app is...i would say 75-80%. I've had trouble sometimes getting it to popup the "auto-fill" but otherwise it works very slick (supporting biometric unlock too).

Bitwarden doesn't do iCloud sync to iOS, or does it? (didn't when I had a look at it a while back).

No the vault is not able to be a local vault but you can self host your vault on your own server and it uses secure remote password for logging in just like 1password. It also has end to end encryption for the vault. The only way for your vault to get compromised is through a server compromise and brute forcing your password, due to how SRP works, even if DNS was taken over and someone intercepted your login request it’s not possible to derive anything about your password and the client would detect that the remote doesn’t actually have the vault. Even if they man in the middled the login they can’t learn about your password or get access to your encrypted vault.