Live data from Hacker News

Bitwarden raises $100M

bitwarden.com

71–80 of 522 posts

Re: Bitwarden raises $100M

#72
post #35

This is interesting I guess. But can't say it's something to be excited about. I've been using vaultwarden purely because I wanted to play around with rust and it turned into my favourite manager of all time. 10/10 would recommend!

But isn't it just a clone of the Bitwarden server without any extra feature?

Not 'just a clone'. vaultwarden is based on a totally different platform, and is less resource hungry. In particular, it consumes much less RAM.

Re: Bitwarden raises $100M

#73
post #56

Earlier quoted context omitted.

How is vaultwarden more independent than bitwarden? Aren't they both FOSS and can be forked?

bitwarden server is mostly written by bitwarden's CTO. [1] If tomorrow bitwarden decides to do "a mongodb" (= violating the AGPL, and make it closed-source), you would have to spin up a new community to maintain the AGPL fork. [1] https://github.com/bitwarden/server/graphs/contributors

How exactly is it violating the AGPL for the author to change licenses? They require contributors to assign copyright so... BitWarden belongs entirely to BitWarden.

Re: Bitwarden raises $100M

#74
post #35

This is interesting I guess. But can't say it's something to be excited about. I've been using vaultwarden purely because I wanted to play around with rust and it turned into my favourite manager of all time. 10/10 would recommend!

But isn't it just a clone of the Bitwarden server without any extra feature?

I’ve been using Vaultwarden for just myself for at least a couple of years now, and it’s at 32MB of disk space (That’s feature.

(As a matter of fact, it’s grown quite a bit since I started using it; it used to be under 20MB of disk space and 10–15MB of RSS.)

Re: Bitwarden raises $100M

#75
Glad for them and I really hope them to succeed in the long run, engrosing the list of successful bussiness based on OS.

As a side note, I've been tempted so many times at this point on getting a payed subscription and getting rid of my "keepass+keepassdb sync via Google drive+keepass keyfile local copy on each device" for the sake of making things simpler. I've read how the internals work, checked the auditories, read forums etc. Everything looks great, but I am always paranoid of some security issue arising and my passwords being leaked. I have my entire life pretty much on my password manager and that being exposed would be disatrous at so many levels. Probably just me being irrational.

Re: Bitwarden raises $100M

#76
post #66

Earlier quoted context omitted.

That's only possible if Bitwarden requires a CLA, do they require a CLA for commits/PRs?

Yep, https://contributing.bitwarden.com/contributing/#contributor...

Yup: Section 2.1: "By submitting a Contribution, you assign to Bitwarden all right, title, and interest in any copyright in the Contribution and you waive any rights, including any moral rights or database rights, that may affect our ownership of the copyright in the Contribution.

Re: Bitwarden raises $100M

#77
post #56

Earlier quoted context omitted.

bitwarden server is mostly written by bitwarden's CTO. [1] If tomorrow bitwarden decides to do "a mongodb" (= violating the AGPL, and make it closed-source), you would have to spin up a new community to maintain the AGPL fork. [1] https://github.com/bitwarden/server/graphs/contributors

How exactly is it violating the AGPL for the author to change licenses? They require contributors to assign copyright so... BitWarden belongs entirely to BitWarden.

Because if you've accepted patches you're not the author of the entire code base anymore. So it's not your own work, but a collaboration.

This is why I never sign CLA. Since I'm basically signing my rights away.

Re: Bitwarden raises $100M

#78

> The Bitwarden business model will not change Bitwarden remains committed to A fully featured free version, forever An open source architecture The ability to self-host Advanced business features This is great!

How do you trust the word of a company that doesn’t have a profitable business model? Just wait for the inevitable “Our Amazing Journey” post on their website.

I don't understand, how is their business model not profitable? Their business model is, as I understand it, paid subscriptions.

Re: Bitwarden raises $100M

#79
post #37

Earlier quoted context omitted.

Citation (code snippet(s)?) please.

Not sure why dwbit's comment got killed, they furthered the conversation and sourced information well by, inter alia , linking to "What third-party services, libraries or identifiers are used in my Bitwarden account?" on Bitwarden's FAQ ( https://bitwarden.com/help/security-faqs/#q-what-third-party... ).

"For those who prefer to exclude all 3rd party communication, Firebase and Microsoft Visual Studio App Center are removed completely from the F-Droid build. Additionally, Turning off push notifications on a self-hosted Bitwarden server will disable using the push relay server."

Re: Bitwarden raises $100M

#80
post #56

Earlier quoted context omitted.

bitwarden server is mostly written by bitwarden's CTO. [1] If tomorrow bitwarden decides to do "a mongodb" (= violating the AGPL, and make it closed-source), you would have to spin up a new community to maintain the AGPL fork. [1] https://github.com/bitwarden/server/graphs/contributors

That's only possible if Bitwarden requires a CLA, do they require a CLA for commits/PRs?

Isn't a CLA just a standard CYA move from more established open source projects? I had to sign one to contribute to Django as well and I don't see them "pulling a MongoDB" any time soon.

My assumption is this is so that they're legally protected from contributors revoking the right to use their contribution at some later point or other obnoxious legal shenanigans.

Post reply on HN