Earlier quoted context omitted.
>password is provided to the server What is this you say?
https://palant.info/2023/01/23/bitwarden-design-flaw-server-...
So its not the password that is being provided, but an encrypted hash
1Password to Add Telemetry
231–240 of 353 posts
Re: 1Password to Add Telemetry
#232Earlier quoted context omitted.
Currently literally consuming 1.4GiB memory on my machine... for a password manager?
This doesn't match with my personal experience. On Windows10 1Password is using locked about 5MB Ram, unlocked 30MB when idle. It shoots up to 150MB when actively being used, but as soon as I close the window, it's back to normal. Firefox extension takes about 1MB of Ram.
This is currently without having the app window open:
https://i.imgur.com/6NjKKhZ.png
Or if you prefer htop:
https://i.imgur.com/XfZZm9B.png
Such memory use is pretty normal when 1Password is running on macOS for some time. And it runs all the time (I think for the UI autofill stuff etc.).
Re: 1Password to Add Telemetry
#233I’ve completely moved away from 1Password (here’s my list of alternatives: https://taoofmac.com/space/apps/1password)
Right now, the only thing I am missing is something that will sync with a KeePass vault and push TOTP tokens to my Apple Watch (as well as a couple of rarely used credit cards whose PIN codes I would like to have always available for emergencies).
Other than that, if you’re not an enterprise customer I think OS or browser-based password managers (which now sync across machines and platforms and even have the ability to do TOTP, at least on the Mac) are finally good enough for end users.
If you need to store software licenses, recovery codes, etc., KeePass XC is excellent for that as well, and available everywhere (and no, sorry, I don’t want to use Bitwarden because I don’t want to run a dedicated sync service for myself, or use anyone else’s).
Re: 1Password to Add Telemetry
#234I've never trusted any of these password storage services and only use KeePassXC. I remember having conversations with people years ago when these services were appearing and I told them that eventually these services would screw over their users. To my amazement people continue to believe that storing their most precious information(passwords) with a 3rd party. I truly don't understand.
It's just too much risk exposure for me. Why on God's green earth would anyone trust some random assholes with something as important as passwords? I just don't get it.
They're gonna screw you over. And they're gonna continue screwing you over because you continue to be their customer. Just recognise that and move on.
Re: 1Password to Add Telemetry
#235Earlier quoted context omitted.
To give 1Password some credit, they haven't broken the standalone licenses yet. Every time the iOS app updates, I suffer from an anxiety attack that sync via dropbox might break. Unsure about a reasonable alternative.
If you don't need shared vaults, Secrets [0] is excellent and feels a lot like the last good version of 1Password before they started down their current path of destroying both their product and their reputation. [0] https://outercorner.com/secrets-mac/
This is what I use on the Mac (full disclosure: I know the developer on a personal basis, since we worked together in the past). Only shortcoming for me is the lack of Apple Watch support for a few key things like TOTP and keeping some credit card PINs always on me.
Re: 1Password to Add Telemetry
#236I honestly can't understand how anyone would use those cloud services for important passwords and keys. The risk/reward ratio is just too high. And for anything not crucially imporant I would just whatever my web browsers support natively.
Re: 1Password to Add Telemetry
#237> Over the years, we’ve relied on our own usage in conjunction with your feedback to inform our decision making. This presents a challenge, though: we don’t know when you run into trouble unless you tell us. And sure, we have an extensive user research program, and listen to all of the feedback you share online and in conversations with our team. > But there are millions of people using 1Password now, often in cool a…
> But there are millions of people using 1Password now, often in cool and innovative It's a password manager, what's "cool" about it? 1Pwd always rubbed me the wrong way in the way they "take themselves too seriously" and overrate their importance It's a password manager. They wouldn't even sync to cloud at first iirc, no? The more boring the better
Re:cool: it's corpo speak for "what the fuck are the users doing", and then realizing that they can build a product around that, turning it into profit.
As a business, if you don't realize situations like this, you both leave money on the table, and also risk users leaving for another product, which offers the missing functionality explicitly.
Re: 1Password to Add Telemetry
#238Seems fine to me. Opt out is reasonable, I trust 1password to not fuck this up versus, say, LastPass. If you already trust 1password to store your credentials, I see little to no impact to your risk exposure by having them collect anonymized telemetry. Curious if others have thoughts here? Their UI has changed a lot in recent years, maybe this will enable them to make more informed design decisions so that one day gr…
>I trust 1password to not fuck this up versus, say, LastPass.
What makes them different?
Re: 1Password to Add Telemetry
#239Earlier quoted context omitted.
This doesn't match with my personal experience. On Windows10 1Password is using locked about 5MB Ram, unlocked 30MB when idle. It shoots up to 150MB when actively being used, but as soon as I close the window, it's back to normal. Firefox extension takes about 1MB of Ram.
This is currently without having the app window open: https://i.imgur.com/6NjKKhZ.png Or if you prefer htop: https://i.imgur.com/XfZZm9B.png Such memory use is pretty normal when 1Password is running on macOS for some time. And it runs all the time (I think for the UI autofill stuff etc.).
Wow, that's really bad.
Re: 1Password to Add Telemetry
#240What is the random query parameter injected into the open-and-fill feature? Is it not telemetry?