Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password to Add Telemetry

blog.1password.com

Post reply on HN
Print view View original

181–190 of 353 posts

Re: 1Password to Add Telemetry

#181

Post by hmnd0 »

ROFISH wrote: post #175
torstenvl wrote: post #141

Users: We want standalone non-subscription licenses! 1Password: I really wish we knew what users wanted. Users: Please don't move to Electron, I don't want Chrome bugs in my password manager. 1Password: I'm just baffled. We never hear from users. Users: Please, for the love of God, give us control over our vaults. Don't go cloud-only, we're begging you! 1Password: Better turn on telemetry. It's the only way to solve…

Even more hilarious: I have recorded customer service events specifically stating against all three of those. I liked 1Password when it was an amazing Mac-only app. Now it's just another Electron app I can throw away and discard for different Electron app, there's nothing special about it. The problem is that I don't see any particular alternative. I don't like Bitwarden's security (password is provided to the server…

> password is provided to the server to partially unlock so a malware server or MITM could get the password

That is completely false.

"The Master Password is cleared from memory after usage and never transmitted over the Internet to Bitwarden servers, therefore there is no way to recover the password in the event that you forget it."[0]

[0]: https://bitwarden.com/help/bitwarden-security-white-paper/

Re: 1Password to Add Telemetry

#182

Post by ROFISH »

hmnd0 wrote: post #181
ROFISH wrote: post #175

Earlier quoted context omitted.

Even more hilarious: I have recorded customer service events specifically stating against all three of those. I liked 1Password when it was an amazing Mac-only app. Now it's just another Electron app I can throw away and discard for different Electron app, there's nothing special about it. The problem is that I don't see any particular alternative. I don't like Bitwarden's security (password is provided to the server…

> password is provided to the server to partially unlock so a malware server or MITM could get the password That is completely false. "The Master Password is cleared from memory after usage and never transmitted over the Internet to Bitwarden servers, therefore there is no way to recover the password in the event that you forget it."[0] [0]: https://bitwarden.com/help/bitwarden-security-white-paper/

Bitwarden does some of the KDF operations server-side which means that a portion of the password (even if it's been through some KDF operations) is sent to the server.

EDIT: https://palant.info/2023/01/23/bitwarden-design-flaw-server-...

Re: 1Password to Add Telemetry

#183

Post by ROFISH »

flangola7 wrote: post #177
ROFISH wrote: post #175

Earlier quoted context omitted.

Even more hilarious: I have recorded customer service events specifically stating against all three of those. I liked 1Password when it was an amazing Mac-only app. Now it's just another Electron app I can throw away and discard for different Electron app, there's nothing special about it. The problem is that I don't see any particular alternative. I don't like Bitwarden's security (password is provided to the server…

>password is provided to the server What is this you say?

https://palant.info/2023/01/23/bitwarden-design-flaw-server-...

Re: 1Password to Add Telemetry

#184

Post by JonChesterfield »

satvikpendem wrote: post #164
hrunt wrote: post #106

Earlier quoted context omitted.

Imagine for a minute that you have a hammer. This hammer is a very useful tool and you have never had a problem with it. You don't know what is in the hammer -- could be steel, could be titanium, could be uranium (you're not a scientist!) -- but you know that it has always worked for you. Your experience with the hammer is so positive, you would buy another hammer from the company again, without question. One day, th…

> No one would ever buy that hammer again, right? I think you came to the wrong conclusion. Lots of people might still buy the hammer, and lots of people might knowingly buy the hammer, and even more, lots of people might knowingly buy the hammer and like that the hammer is being fixed when it breaks. I honestly don't understand why so many people oppose telemetry, especially when it's anonymous.

Can you imagine why someone might not want software containing their passwords and credit cards to stream data to a central server under the control of whoever wrote that software?

Re: 1Password to Add Telemetry

#185

Post by favorited »

crossroadsguy wrote: post #179

They’re going CrashPlan. You were all dog-fooders and beta testers all these years for their eventual destination - the enterprise. Yes, of course you’ll be able to buy at $XXX/year with a minimum 10 users plan while you are all still singing paeans in the tune of - “oh it has gone shites, but it’s great, happy customer here!” Mac/Apple only customers have this strong inclination for some kind of Stockholm syndrome w…

> Mac/Apple only customers have this strong inclination for some kind of Stockholm syndrome when it comes to software

For decades, Mac users didn't have the same software choices that Windows users had, and a lot of what was available were shitty ports. When a company released high-quality Mac software, it was noticed and appreciated by Mac users.

Obviously that situation has changed in a post-iPhone world, but the culture of appreciating when someone made a really great Mac-native app is still there for a lot of people.

Re: 1Password to Add Telemetry

#186

Post by Saris »

themagician wrote: post #120
raverbashing wrote: post #115

Earlier quoted context omitted.

> But there are millions of people using 1Password now, often in cool and innovative It's a password manager, what's "cool" about it? 1Pwd always rubbed me the wrong way in the way they "take themselves too seriously" and overrate their importance It's a password manager. They wouldn't even sync to cloud at first iirc, no? The more boring the better

You can use it for a lot more than just passwords, which IMO is what makes it stand apart from Bitwarden. You can store notes, credit cards, photocopies of IDs, software licenses, key pairs, etc. You get 1GB of storage. They really have turned it into a "vault" for anything digital.

Same with Bitwarden or Keepass, it's certainly not unique to 1password.

Re: 1Password to Add Telemetry

#187

Post by favorited »

AwaAwa wrote: post #131
rdl wrote: post #76

The 1Password "no local/standalone vaults" "upgrade" in 7->8 is what got me to leave it after 15 years or so. They're killing the extensions used by Chrome/Brave/etc. in 3 months, so it became critical to move off Version 7 (which is probably not getting much security maintenance now, either). RIP.

Little worse is that the manifest deprecation was delayed into 2024, but that hasn't stopped them from killing the extensions in 3 months. I loathe having to migrate out of 1P 7, but there really is no choice now.

FWIW, I was a longtime 1P user and evangelist, and I moved to BitWarden instead of 1P8. The UX isn't as good, but I was giving up a native experience either way, and BitWarden is cheaper.

The transition was very smooth, and I have no regrets! Plus, now I'm supporting an open source product, which is a nice bonus.

Re: 1Password to Add Telemetry

#189

Post by SanjayMehta »

kspacewalk2 wrote: post #149
torstenvl wrote: post #141

Users: We want standalone non-subscription licenses! 1Password: I really wish we knew what users wanted. Users: Please don't move to Electron, I don't want Chrome bugs in my password manager. 1Password: I'm just baffled. We never hear from users. Users: Please, for the love of God, give us control over our vaults. Don't go cloud-only, we're begging you! 1Password: Better turn on telemetry. It's the only way to solve…

They're focusing of the enterprise market. Those users are now what matters, because that's where the money is. Individual and family customers will still get their tier of product, but ain't no company-wide business decisions gonna be catered to their whims. And particularly with standalone perpetual licences, which I'm still clinging on to. Sync via DropBox, share a vault with family, and another one with my small…

To give 1Password some credit, they haven't broken the standalone licenses yet. Every time the iOS app updates, I suffer from an anxiety attack that sync via dropbox might break.

Unsure about a reasonable alternative.

Re: 1Password to Add Telemetry

#190

Post by arepublicadoceu »

mdaniel wrote: post #176
arepublicadoceu wrote: post #122

Earlier quoted context omitted.

> it's still light years ahead of the Bitwarden clients and extensions I’m quite possible a simpleton but I can’t see how it’s light years ahead of Bitwarden. Can you provide an example of such difference? Every time I used to check 1password (before the Great Purge of local vaults) I always arrived at the same conclusion. It’s a bit more beautiful but not 3x or 4x (whatever the price is) more beautiful then Bitwarde…

I often regret any contact I have with the Bitwarden fanbase, because whooo they are rabid, but I guess I used to be a rabid fan of 1P so maybe fair's fair :-D Anyway ... - https://github.com/bitwarden/clients/issues/1620 was created 2021, after it was migrated from the issue that was open even longer in the other repo, and now they've locked the issue because they're tired of people complaining about the extension l…

I try not to tie my personality to a piece of software, so I would definitely not consider myself a fan of BitWarden, just a satisfied user.

None of your issues I personally experienced or particularly bother me, this is probably a statement to how different people experience different pain points, but your list of complaints was exactly what I was trying to understand. Thank you for taking the time for such a thoroughly response.

As I said, my needs are extremely simple for my password manager. Just keep my data safe, searchable, available on all my devices, generate some strong password and that's it. But I completely understand if you need more. Different strokes for different folks and all that.

Post reply on HN