Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple passwords deserve an app

cabel.com

Post reply on HN
Print view View original

371–380 of 414 posts

Re: Apple passwords deserve an app

#371

Post by theshrike79 »

AdamN wrote: post #366
MobileVet wrote: post #301

Earlier quoted context omitted.

I definitely appreciate the 'security forward' approach... but what about end of life planning or general 'dad's in a comma and XYZ needs to happen'? 1Password with a 'parents vault' that my wife and I share has been a life changer for coordinating family access to important accounts AND ensuring solid passwords are being used.

My iCloud is set up for end of life (Legacy I think they call it?). The recipients would then get iCloud passwords and my 1Password vault.

Coma is not "end of life". So your family must either euthanise you or wait for you to wake up to access the passwords?

Re: Apple passwords deserve an app

#372

Post by __david__ »

lxgr wrote: post #201
rpgbr wrote: post #154

Earlier quoted context omitted.

This was precisely what drove me off Apple password manager. If your iPhone were compromised, such as in those iPhone unlocking scams[1] (something quite common here in Brazil at least since 2021), it's game over for your entire password database. I've been using KeePass apps (MacPass on macOS, KeePassium no iOS), with a different, unique master password, unlogged by default on iPhone, plus DB locks automatically aft…

Absolutely. Given these reports, Apple's security model isn't close to being sophisticated enough to warrant trusting them with passwords or (even more critically, arguably) WebAuthN passkeys. I recently saw it with my own eyes as a family member was able to reset their iCloud password and gain full access to their account on a new device, including iCloud Keychain, using nothing but their iPad and the corresponding…

Incidentally this is the method my 6 year old nephew used to reset his mom’s Apple ID password so he could make in-app purchases. He figured it out on his own and then spent $3000 in a couple days. His mom had been very careful with her password but when he wanted a code on his iPad she thought it was harmless—she certainly never expected that he could get all the way to changing her password with nothing more than the lock code! Took her months to sort it out.

Re: Apple passwords deserve an app

#373

Post by makeitdouble »

AdamN wrote: post #364
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

Serious question but what do you use Windows for? I don't know alot of people that use Windows anymore so just wondering is it a work requirement?

Went the other route, sold my iPad and went with a Surface instead...

the short of it: It's inelegant, there's bugs, the UI is half-assed and some aspects are straight hostile (default widgets etc.). But it's an actual generic computer. Most task you assume you could do with a computer, there will be a way to do it.

It might take some efforts to get to a decent setup, but the walled garden was also a PITA, so all in all, I felt my time is better invested in making windows a nice place than the endless fighting of Apple on iOS.

As a halo effect, I'm kinda thinking about moving to Windows on my main computer as well on the next refresh cycle...not fully decided, but that feels like a viable option.

Re: Apple passwords deserve an app

#374

Post by makeitdouble »

great_psy wrote: post #33

I have been using the Apple manager since LastPass got hacked recently. Hot take , but … I like the lack of integration in other operating systems/ browsers. I see my phone as a Secure Enclave, and my passwords should be disconnected from potentially insecure systems. I see the phone as those keychain one time passwords where you have to press a physical button to get a key. Is it inconvenient to get a password, yes.…

Thing is, even within these constraints it has rough edges.

If you have two accounts (let's say a personal one and work/family/org one), getting passwords for the second account will just be a PITA.

Same issue of course if you need someone else's password (e.g. your spouse's hotel reservation account's password)

Trying to work this around means you'll either be asking people's passwords other the phone or other means, or you'll often switch between accounts and will want lower security on the account themselves as the identification process get old very quick. Basically, these limitations are not without impact on security and how people will deal with them.

Re: Apple passwords deserve an app

#375

Post by steve1977 »

marvel_boy wrote: post #197
steve1977 wrote: post #107

Earlier quoted context omitted.

Apple had (has?) Cocoa ported on Windows actually, so whatever they could so on macOS, they could do on Windows as well. Cocoa as such is cross-platform.

Any link to the port of Cooca to Windows?

Apart from the already mentioned OPENSTEP for Enterprise, see also here:

https://www.stone.com/dev/StonesThrow2/OneFoxTwoFox.html

Basically, it was called Yellowbox, but it didn’t officially survive the release of Mac OS X IIRC. But Apple was at least still using parts of it for some Windows ports back then I believe.

Re: Apple passwords deserve an app

#376

Post by rpgbr »

great_psy wrote: post #219
rpgbr wrote: post #156

Earlier quoted context omitted.

Except password managers that YOU need to take care your vault, like KeePassXC.

I used keePass before LastPass, but the issue was with keeping the file synced. I had it in Dropbox and I was able to open it no problem from the phone, but making updates from phone was a challenge. Maybe I was not using a good app but it was a hassle to keep it synchronized. But anyway, somebody could cut off your access to Dropbox, but it’s less of an issues since you have a backup.

I simply don’t sync my vault. I don’t add or change passwords very often, so I treat the vault in my computer as a “main copy” and once a week, during my backup routine, I copy the current vault to my phone. Never had an issue.

Re: Apple passwords deserve an app

#377

Post by Thlom »

keyle wrote: post #257
yamtaddle wrote: post #151

Earlier quoted context omitted.

> 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. Like a lot of other Apple stuff, I'm only able to use it because I don't use anything non-Apple for anything "serious" that involves a GUI. Windows is for gaming, Linux is my file storage and docker-service-running server that I only interact with over SSH and Web. Ditto Notes, all their Office-type progra…

>> 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. > Yeah, this is super fucking weird. You'd think this would be connected in some fashion to "keychain", but nope No it's not. I don't want some exotic product connect to a domain I have passwords in and prompting me for access. The password should be tied to the product you used to lo…

But on iOS I can use keychain from apps to find login information that is stored from Safari?

Re: Apple passwords deserve an app

#378

Post by arrrg »

robotresearcher wrote: post #95
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

> 3. The GUI is buried in System Settings. Heaven forbid you need search it's only a simple 37 clicks away! On Mac, at any time, type: command-space passw On iOS tap on any home screen, type passw, tap suggested result

Is this you arguing that it‘s not buried?

Having to access something via a search incantation (or, alternatively, a ton of clicks) is not at all easily accessible. It’s buried alright.

Obviously you can find pretty much anything on macOS and iOS via search. That‘s how it‘s should be. But that doesn’t make things accessible or even just visible.

Re: Apple passwords deserve an app

#379

Post by arrrg »

sagarkamat wrote: post #13
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

Agree on most of this but Keychain Access IS a standalone app on the mac so slightly confused about the comment about it being buried in System settings. Its still a pain to go to the app and copy a password for non-Safari browsers though.

That app is not at all a password manager.

It‘s a view and editor for all kinds of stored keys. I don’t think its target audience ever were intended to be some random macOS users. That’s just not the target group. It‘s about power users that need to access or store all kinds of keys.

Re: Apple passwords deserve an app

#380

Post by chakintosh »

hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

> 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product.

Ditto. Why do I have to replace my Windows login password with a "PIN" code that's the same as the iCloud Keychain PIN !? That's super weird!

Post reply on HN