Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple passwords deserve an app

cabel.com

Post reply on HN
Print view View original

241–250 of 414 posts

Re: Apple passwords deserve an app

#241

Post by johnwalkr »

yamtaddle wrote: post #151
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

> 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. Like a lot of other Apple stuff, I'm only able to use it because I don't use anything non-Apple for anything "serious" that involves a GUI. Windows is for gaming, Linux is my file storage and docker-service-running server that I only interact with over SSH and Web. Ditto Notes, all their Office-type progra…

I use windows almost only for gaming (and CAD) too, and I've found that recently that the webapps, especially music and notes are good enough, and icloud drive and photos integration to windows actually work well.

But yes, passwords is annoying. You can use them on chrome on windows but not on MacOS, and on Windows it doesn't work on anything but chrome. Speaking of gaming, game launchers on windows can't get passwords from Apple and also seem to log me out all the time, so I have to revert to using my phone to see my password and manually type it in.

Re: Apple passwords deserve an app

#242

Post by eastbound »

amluto wrote: post #224
knodi123 wrote: post #212

Earlier quoted context omitted.

> The fucking name of the screen is "passwords"! I shouldn't have to get farther than "pas" for it to be the first entry on the list, "pass" in the worst-case! Weird. "pas" and it was top of the list for me.

In Spotlight, I need “passw” to see it. In the actual Settings search, I also need “passw”, and that only gets it to #5 in the list. Also, Spotlight is bizarrely slow finding even local apps and things like Passwords. WTF

Did you tell it to ignore most local files?

Re: Apple passwords deserve an app

#243

Post by InCityDreams »

great_psy wrote: post #113
imwithstoopid wrote: post #41

Earlier quoted context omitted.

don't lose or break your phone....

I have my old iPhone with no sim that I mostly take to the gym to protect the new one.

>I have my old iPhone with no sim that I mostly take to the gym to protect the new one.

What is the other one doing in the gym, unprotected?

Re: Apple passwords deserve an app

#244

Post by paulryanrogers »

waboremo wrote: post #215
porcoda wrote: post #63

Earlier quoted context omitted.

This has been the story of Apple apps outside MacOS forever: they appear to always do the absolute minimum to claim support, and you end up with a super clunky windows app that is terrible. I doubt they’d do much better using electron: I think their development model is that if it isn’t on one of their platforms, they pump out a minimum-effort, low quality app. I’d guess that electron ones would be just as clunky, ex…

That hasn't really been true. Apple supported iTunes and Safari which were great options on Windows. Not just "I'm already an Apple fan so I have to use it", but actively deciding to use them. The root of the problem for Apple is that they cannot get away with doing what they used to in the past, they already have a plethora of platforms within their own umbrella to support, adding Windows native to the mix seems to…

So SwiftUI for Windows?

Re: Apple passwords deserve an app

#245

Post by elbigbad »

whalesalad wrote: post #161
monocularvision wrote: post #141

Am I the only person on Earth that needs sharing of passwords among my family? Any time folks bring up password solutions, they are always missing this requirement for me. 1Password is a life-saver in this regards. All my kids have their own vaults but for the little ones I have them use a shared vault between my wife and me so we have access to their passwords. I can also easily share passwords for services like Net…

A 1pass team w/ my wife was a huge level-up.

Same, anytime the family creates a new account that everyone else should have access to (utilities, streaming services, bank information, pass codes, etc) we just create it in the shared vault. It’s a game changer.

Re: Apple passwords deserve an app

#246

Post by lxgr »

great_psy wrote: post #231
lxgr wrote: post #220

Earlier quoted context omitted.

The attack in this case would be somebody shoulder-surfing your PIN and grabbing your device. They then have everything they need to take over your iCloud account (kicking you out of it in the process by resetting all other devices capable of resetting it) and can see all your passwords stored in it, as well as use all of your WebAuthN passkeys. I'm not sure if having a recovery code would improve that situation, but…

Ah ok, yes the shoulder surfing is definitely a problem. Hard to mitigate somebody looking over your shoulder, this is the case with most password managers, but I understand why this is a more likely scenario.

In a semi-safe situation (e.g. on busy public transit or in a crowded place with people behind me), I do sometimes unlock my password manager using Face ID to access a website, but I'd never enter my passphrase if the biometric unlock fails.

If somebody watches me enter my passcode and then rips the device out of my hands and runs off with it (assuming the password manager is not open), they now have access to most of the content on my phone, but importantly not the parts protected by Face ID, which includes the password manager.

If I had used Apple's password manager instead, they'd be able to recover all passwords (using the tactics described above or simply enrolling their own face in Face ID, which is possible using only the passcode).

Re: Apple passwords deserve an app

#247

Post by testfrequency »

shikshake wrote: post #183
filmgirlcw wrote: post #117

Earlier quoted context omitted.

+1 Ricky is the best. They also made a very useful Shortcut [1] that offers quick access to the Passwords on your Home Screen or Mac menubar. [1]: https://rmondello.com/passwords-shortcut/

clicking this link throws a bunch of warnings in my browser, and my university internet blocks me from seeing the actual website :(

https://www.icloud.com/shortcuts/cd5b0ec116ee4d1d86548238394...

Re: Apple passwords deserve an app

#248

Post by OsintOtter69 »

hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

Last pass had a major incident recently iirc.

Re: Apple passwords deserve an app

#249

Post by JimDabell »

cstrahan wrote: post #186
stouset wrote: post #179

Earlier quoted context omitted.

Just use Passkeys. Any account that allows 2FA allows multiple second factors. You should be setting up backup second factors anyway if you don't want to risk getting permanently locked out of all of your accounts. Plus, putting second factors in the same location as your first factor (e.g., 1Password) seems to pretty much defeat the entire purpose of having a second factor. If you're using strong passwords with 1Pas…

Well, with the exception of AWS, unless something has changed recently — they notoriously only support one second factor (i.e. if you use YubiKeys or similar, you can only use one).

You can add multiple MFA devices since November of last year:

> Now, you can add multiple MFA devices to AWS account root users and AWS Identity and Access Management (IAM) users in your AWS accounts. This helps you to raise the security bar in your accounts and limit access management to highly privileged principals, such as root users. Previously, you could only have one MFA device associated with root users or IAM users, but now you can associate up to eight MFA devices of the currently supported types with root users and IAM users.

— https://aws.amazon.com/blogs/security/you-can-now-assign-mul...

Re: Apple passwords deserve an app

#250

Post by OsintOtter69 »

klodolph wrote: post #185
yamtaddle wrote: post #151

Earlier quoted context omitted.

> 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. Like a lot of other Apple stuff, I'm only able to use it because I don't use anything non-Apple for anything "serious" that involves a GUI. Windows is for gaming, Linux is my file storage and docker-service-running server that I only interact with over SSH and Web. Ditto Notes, all their Office-type progra…

> Yeah, this is super fucking weird. You'd think this would be connected in some fashion to "keychain", but nope. Other browsers used to be able to use it. I do think it’s a really thorny issue—“allow this application to access all saved passwords?” is a pretty damn scary permission to include. Up there with the “allow this application to control your computer” permission that is used for accessibility apps (which ap…

[flagged]
Post reply on HN