Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

End of Support for Firefox Lockwise

support.mozilla.org

Post reply on HN
Print view View original

101–110 of 136 posts

Re: End of Support for Firefox Lockwise

#101

Post by jfrunyon »

jonchang wrote: post #54
trebcon wrote: post #31

Earlier quoted context omitted.

Their messaging was pretty poor here imo. The email they sent me gave no clear indication that Firefox would have this ability in it's body.

These are the first paragraphs of the email I got: > On December 13th 2021, the Firefox browser will be officially "resorbing" Firefox Lockwise. Don't worry, all your saved Lockwise passwords will still be available through the Firefox browser using a Firefox account. > The Firefox Lockwise app will no longer be updated and supported by Mozilla and will not be available in the Apple App and Google Play Stores. After…

Where does that say that it will autofill?

Re: End of Support for Firefox Lockwise

#102

Post by the_duke »

gjsman-1000 wrote: post #48
the_duke wrote: post #40

Earlier quoted context omitted.

There is exactly zero chance of maintaining an up to date, reasonably fast and secure browser without a large, dedicated team of highly qualified developers. Good luck with forking... Mozilla has definitely failed with most of their side projects, many of them really redundant. And shutting them down is really bad for their reputation. But they also need to find some funding source that doesn't make them beholden to…

"But they also need to find some funding source that doesn't make them beholden to Google or Microsoft. They have been desperately trying to do that." I agree. How about we do some executive cuts at Mozilla then? $2.4 million for the top exec over there, maybe to $300K or so which is closer to average for a nonprofit, would be a free $2 million per year. It's not like those executives have been successful in any way…

Don't get so hung up on that salary. Managing a 400 million + revenue company with 700+ employees is a big job with lots of responsibility and legal liability. Considering what US developers make, 2 million is not a lot of money for that job in SF and perfectly fine for a qualified CEO.

Mozilla did not find a qualified candidate and had to make due with a weak one, probably in part due to the low compensation.

Re: End of Support for Firefox Lockwise

#103

Post by jfrunyon »

YXNjaGVyZWdlbgo wrote: post #91
ulimn wrote: post #79

Earlier quoted context omitted.

And if you pay $10/year, it has 2FA as well. And you can add notes and such. It's definitely worth using (and paying imo).

Wait so it lets you store your 2FA secrets and your password in the same place? That sounds counterintuitive.

It's super useful for a few sites I visit frequently who require 2FA but I don't need that security. But yeah, otherwise it's a pretty remarkably bad idea.

Re: End of Support for Firefox Lockwise

#104

Post by kelnos »

kevincox wrote: post #68
kbenson wrote: post #27

Earlier quoted context omitted.

> Also, having to open my browser for every password I need to copy on my phone just seems clunky and stupid. You don't (at least for Android), the functionality of Lockwise appears to have been replicated in Firefox. There's a toggle in the logins and passwords settings section of Firefox to allow it to fill in passwords for other apps. Apparently they're rolling it out in iOS next month, according to the article (a…

Fantastic! I never liked having another app for passwords so I removed lockwise as soon as Firefox (the new one) got password support but was never aware that it grew autofill support!

I'm not sure how great this is, though, from a security perspective. When I select Firefox as my autofill provider on Android, I get this message:

> "Make sure you trust this app"

> "Firefox Beta uses what's on your screen to determine what can be autofilled."

So, unless I'm mistaken, it sounds like the OS gives the selected app special privileges to read what's on the screen (at all times?). I would much rather have a standalone, single-purpose app doing this than a gigantic browser. The former is much easier to secure.

Re: End of Support for Firefox Lockwise

#105

Post by kf6nux »

Miraste wrote: post #67
kf6nux wrote: post #49

Earlier quoted context omitted.

> When do we fork Firefox because Mozilla is a failure at their job? When we can and will do better. FWIW, I heard Mozilla is offering full refunds to everyone that purchased Lockwise, which is way better than you'd get from any for-profit company.

But Lockwise is free. Was that the joke?

Yup, I was poking fun at the entitlement people feel toward FOSS developers who release free products.

Amusingly, the person railing against Mozilla didn't catch that it's free and used "the refunds" as an additional talking point against Mozilla.

Re: End of Support for Firefox Lockwise

#106

Post by agolliver »

ziddoap wrote: post #86
thinkloop wrote: post #81

Earlier quoted context omitted.

No-one seems to ever mention LastPass for some reason when this comes up. It's a complete solution, locally-encrypted, backed-up to the cloud, auto-fill, apps, all platforms, etc.

Not open-source, 3rd-party trackers in the android app, no easily accessible 3rd-party audits (that I can find), an unintuitive UI (no easy 1-button copy, clunky item entry*, etc.), and roughly 1 security incident every 1.5 years. Are they the worst? No. Are there better ones? Yes. *The number of people at work which put their username in the URL field is astounding. We also have people saving personal passwords into…

I'd also say it's integration with Firefox on Android is just a broken, miserable experience. (I mostly blame FF for this, because it used to be great)

https://github.com/mozilla-mobile/fenix/issues/9773

Re: End of Support for Firefox Lockwise

#108

Post by yownie »

mosselman wrote: post #19
antback wrote: post #10

But to access the same functionality with Firefox in android I have to go into 3 levels of menus or I'm wrong. Very annoying ...

Installing a separate app and signing in on it sounds a lot more cumbersome

It actually presents itself seamlessly in context menus using the fingerprint unlock or phone unlock code.

Re: End of Support for Firefox Lockwise

#109

Post by orhmeh09 »

KennyBlanken wrote: post #50
swdunlop wrote: post #35

Earlier quoted context omitted.

Ditto. I came to HN after seeing the email, looking for the best way to migrate my passwords out of Lockwise. Well, still looking. They are outta here.

Keepass + your choice of file sync. Keepass's database has file-based locking so it's safe to sync just via filesystem. I like KeepassXC one Android and MacOS; Keepassium free-tier on iOS works great. On Android you can use syncthing, but syncthing doesn't work on iOS, so I use NextCloud to sync everything now.

Safe even on NFS? ;)

Re: End of Support for Firefox Lockwise

#110

Post by yownie »

krzyk wrote: post #44
mosselman wrote: post #19

Earlier quoted context omitted.

Installing a separate app and signing in on it sounds a lot more cumbersome

It is one time install, and signing in just after restart. used for autocomletion in apps. With just firefox I won't have that.

agreed.
Post reply on HN