Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden raises $100M

bitwarden.com

Post reply on HN
Print view View original

151–160 of 522 posts

Re: Bitwarden raises $100M

#151

Post by scarface74 »

ctvo wrote: post #111
scarface74 wrote: post #88

Earlier quoted context omitted.

Why are large businesses “sharing passwords” between users? What happens when one user leaves? Isn’t sharing a password in a business context like “Things you shouldn’t do” 101?

> Why are large businesses “sharing passwords” between users? What happens when one user leaves? Because not all products businesses use have fine grain authentication and authorization. For example, their registar for their domain names. And differing employees need access to it at different times. > Isn’t sharing a password in a business context like “Things you shouldn’t do” 101? What do you think Bitwarden does?…

Now I’m curious and this comes from my job history is working at mostly small disorganized companies and then moving to one very large company where I work with other very large enterprises so I have no experience with mid size companies.

Say I work for a large company where everything is gated via an SSO - email, Slack, internal apps, ADP for payroll, my brokerage account containing my 401K information (of course I do have a separate non SSO password for this since it is my account), and Bitwarden (I see it does support SAML).

If I leave my very large organization, it’s easy enough for a manager to disable my SSO and be mostly assured that I don’t have access to anything I shouldn’t. Because “security is job 0” (How do you say where you work without saying where you work /s).

Now let’s say that BitWarden stores 10 passwords to external services and I had access to those passwords through Bitwarden. Does someone then have to go in and manually change passwords to those 10 services every time someone leaves?

Re: Bitwarden raises $100M

#152

Post by bborud »

I switched to Bitwarden when LastPass started using silly tactics to make customers pay. I didn't switch because of the price - the service pricing of Bitwarden was a pleasant surprise.

I switched because I lost all trust in LastPass.

Managing credentials and sensitive information is all about trust. The second I lose trust in that kind of service, I don't just stop using it, I will most likely never even consider coming back as a customer and I will warn people against them. I don't give second chances to services that are trust based.

I'm pretty happy with Bitwarden so far. But if they betray my trust I'll be out of there in a day, never to return. I switched from LastPass to Bitwarden in a day. LastPass never gets a second chance.

What the VCs have to understand is that if their greed makes them push Bitwarden to engage in silly tactics, they risk driving away their customer base.

Re: Bitwarden raises $100M

#153

Post by elforce002 »

ChuckNorris89 wrote: post #131

I'm not referring to Bitwarden here but isn't this the standard M.O. of any SV startup? 1. Release great product for free 2. Attract as many free users as possible to signal growth to investors 3. Keep running the unprofitable free tier at a loss as long as possible using your massive VC war chest, while locking in your users with various gotchas 4. Once you reach critical scale and gained mass user adoption and you'…

This is frighteningly specific.

Re: Bitwarden raises $100M

#155

Post by pwpw »

MaKleSoft wrote: post #125

If you're a Bitwarden user and this doesn't worry you, you haven't been paying attention to the history of almost every company that has accepted VC funds. It doesn't matter how well intentioned the founders are - once you accept that kind of money, it's not your product anymore. You are now in the business of making money, nothing else, and those skewed incentives will start bleeding into their product and business…

That’s a hell of a disclaimer after a decently alarmist comment. You may be correct, but I’m not sure it’s appropriate for you to raise that point given the conflict of interest.

Re: Bitwarden raises $100M

#156

Post by xd1936 »

timwaagh wrote: post #116

Happy user here. Congratulations to the company. Would be cool if they invested some into autofill functionality for their Android app because that doesn't seem to work as it should.

My experience with the app's autofill using both the Android Autofill Framework and the Quick-Action Tile has been great. Can you talk more about what doesn't work well for you?

Re: Bitwarden raises $100M

#157

Post by noirbot »

ctvo wrote: post #111
scarface74 wrote: post #88

Earlier quoted context omitted.

Why are large businesses “sharing passwords” between users? What happens when one user leaves? Isn’t sharing a password in a business context like “Things you shouldn’t do” 101?

> Why are large businesses “sharing passwords” between users? What happens when one user leaves? Because not all products businesses use have fine grain authentication and authorization. For example, their registar for their domain names. And differing employees need access to it at different times. > Isn’t sharing a password in a business context like “Things you shouldn’t do” 101? What do you think Bitwarden does?…

It's also useful for things like secure temporary password delivery. I set up your account for the first time with a new service, generate a temp password you have to reset on first login, and then share it to your Password Manager space.

Also just useful for things like API keys - my team just has all of our team's allocated API keys for various services in our password manager so we don't have to go look them up in all of the various service's sites if we need them.

Re: Bitwarden raises $100M

#158

Post by yewenjie »

ctvo wrote: post #86
midasuni wrote: post #50

Earlier quoted context omitted.

Why has someone put 100m in? Because they expect 200m back.

*10 billion back.

How is that realistic? If they expect to get 10 billion in 10 years, they need to have 100 million paying users (if they charge $10 per user per year), which is like the entire active users count of StackOverflow - https://en.wikipedia.org/wiki/List_of_social_platforms_with_...

Re: Bitwarden raises $100M

#159

Post by MaKleSoft »

ChuckNorris89 wrote: post #131

I'm not referring to Bitwarden here but isn't this the standard M.O. of any SV startup? 1. Release great product for free 2. Attract as many free users as possible to signal growth to investors 3. Keep running the unprofitable free tier at a loss as long as possible using your massive VC war chest, while locking in your users with various gotchas 4. Once you reach critical scale and gained mass user adoption and you'…

You're absolutely right. Of course there is no guarantee that whatever alternative you seek won't turn out the exact same way. But unfortunately all you can do to punish that kind of behaviour is to vote with your wallet and move somewhere else. And hope it'll turn out better this time... There ARE people out there who are trying to build a profitable, ethical business instead of chasing unsustainable growth. Unfortunately the only way to find out who they are is by giving them a chance...
Post reply on HN