Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Get your passwords out of Bitwarden while you still can

osnews.com

Post reply on HN
Print view View original

81–90 of 203 posts

Re: Get your passwords out of Bitwarden while you still can

#81

Post by chuckadams »

pattilupone wrote: post #13

WOW. Quietly editing the 4-year-old blog post is super slimy, holy crap. Also seems like since this story was published, they edited the 4-year-old blog post again. The story points out >But the explanatory paragraph at the bottom of the same post still says the old ones: Inclusion and Transparency. Crandell’s name is still on it. The post now contradicts itself, and nobody wrote a new one. Looking at the post right…

Nothing says Trust like quietly and retroactively editing old blog posts. We have always been at war with EastAsia.

Re: Get your passwords out of Bitwarden while you still can

#82

Post by Terr_ »

smw wrote: post #71
Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

USB sticks are infamously unreliable, not a great backup plan

I realize the wording in my comment was a little ambiguous, but don't worry, that's in addition to my files in general. (Restic, Backblaze B2, memorized passwords/keys, regular integrity checks of remote data.)

After all, even with godlike storage-media on my keychain, it would still be susceptible to a mugger or falling down a deep hole. Until that happens, it provides redundancy and convenience, provided I can bring it to a trustworthy computer.

Re: Get your passwords out of Bitwarden while you still can

#83

Post by parliament32 »

Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

My KeePassXC database auto-syncs to my Nextcloud instance. Nextcloud client on PCs, Keepass2Android on my phone, and it's the same end result as Bitwarden but without the shenanigans.

Re: Get your passwords out of Bitwarden while you still can

#84

Post by gruez »

eleventen wrote: post #7
tremarley wrote: post #4

Earlier quoted context omitted.

Never underestimate the lengths companies will go to, to enshittify their product to squeeze customers for money.

Name one major password manager that blocks or paywalls export.

The iOS "passwords" app didn't support exporting for a while, though they eventually added it.

Re: Get your passwords out of Bitwarden while you still can

#86

Post by culi »

9x39 wrote: post #77

Serious question - how come free is a requirement for a password manager? Everyone's gotta eat, including the maintainers of password managers. Tech has generous TC, lots of high-end laptops and phones worth thousands, AI & cloud spend, and yet the only acceptable price for secrets management is $0 it seems at times.

They promised an "always free" option. People committed to the service based on that.

Many companies offer a free tier and a paid tier and are willing to incur the cost of users who will never convert. If a company doesn't actually intend to keep it "always free" they shouldn't make the promise in the first place

Re: Get your passwords out of Bitwarden while you still can

#88

Post by culi »

Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

USB stick in your pocket sounds nice but what happens when you drop your keys and it cracks or you get caught in a rain storm and it gets soaked?

Re: Get your passwords out of Bitwarden while you still can

#89

Post by webstrand »

parliament32 wrote: post #83
Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

My KeePassXC database auto-syncs to my Nextcloud instance. Nextcloud client on PCs, Keepass2Android on my phone, and it's the same end result as Bitwarden but without the shenanigans.

Do you have a solution for auto-merging conflicting changes? Because I think that's the real difference, editing on a laptop and on a desktop before the sync can occur, can cause data-loss (for my potentially naive use of keepassxc anyway).

Re: Get your passwords out of Bitwarden while you still can

#90

Post by NoGravitas »

kqp wrote: post #73
Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

It’s phones, mainly. People do also have multiple other devices, yes. For me another big pro is having a realtime offsite backup and being able to survive simultaneous loss of all my devices, which is plausible in correlated scenarios like a burglary, fire, mugging, car crash, etc, but I don’t know how much others think of that one. The people I know who use KeePass live like they’re disabled. You ask them to sign up…

Weird. I keep my KeePass database on NextCloud, and the only difference between home and phone is that on a bad network I may need a few seconds for KeePassDX on the phone to decide to use its cached copy of the database rather than the latest one. It would probably be even smoother if I used Syncthing. I assume non-technical people ought at least be able to put their KeePass files on DropBox?
Post reply on HN