1Password Watchtower Mac App Integration • Hacker News Board

Re: 1Password Watchtower Mac App Integration

#11

Post by AGKyle » Thu, May 01, 2014, 4:32 PM UTC

ColinDabritz wrote: post #4

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

[I work for AgileBits, makers of 1Password]

Thanks for the feedback!

Filling into sites and gathering the necessary information for this I think is far easier than determining how a password change takes place. We have an algorithm that we've developed over years that is constantly changing in subtle (and not so subtle) ways to make filling more accurate. Some of the biggest changes in a long time will be coming in the 4.2 version of the browser extension, currently in beta.

But you're right, sites and their password change processes differ greatly. Some require the old password, some require only the new password. Some only require the new password once (admittedly rare).

I think at best though we'd only be able to do this if we went to the password change page for the site and attempted to fill the data in for changing the password. There's no way we could bulk update as that would probably require we hard code each individual site rather than relying on an algorithm for filling data into the site.

It's a tricky thing, but we're always trying to come up with new ideas and ways to accomplish those ideas.

Heartbleed was the first use case for Watchtower, but you're correct in that it'll be available for other situations as well. Now that the foundation is there we can leverage it for other issues in the future.

Thanks again for the wonderful feedback!

Kyle

AgileBits

Re: 1Password Watchtower Mac App Integration

#12

Post by AGKyle » Thu, May 01, 2014, 4:37 PM UTC

bluetidepro wrote: post #2

This is a neat integration by 1Password! 1Password is probably my favorite Mac/iPhone app that I use. Their product is always top notch. Great work guys!

[I work for Agilebits, makers of 1Password]

Thanks for the positive feedback! It really does mean a lot to us to hear that our users are happy.

We have more fun things to unveil in future versions so keep your eyes peeled for more down the road.

The really neat thing about Watchtower is that we don't send customer data out in order to tell them that their password needs to be changed (or that the site is still vulnerable). We download a database to the user's computer and the data in the user's database is checked against that.

If you ever have any questions, comments, or suggestions please let us know!

Kyle

AgileBits

Re: 1Password Watchtower Mac App Integration

#13

Post by AGKyle » Thu, May 01, 2014, 4:39 PM UTC

infra178 wrote: post #3

bluetidepro wrote: post #2

This is a neat integration by 1Password! 1Password is probably my favorite Mac/iPhone app that I use. Their product is always top notch. Great work guys!

How do you get around the lack of bookmarks in the 1password browser for ios?

[I work for AgileBits, makers of 1Password]

You could use the Favorites section. I favorite my most frequently used sites and use that for most logins that I access often.

Would that work? If you have a particular use case that you can run me through that would be wonderful.

Also, user gwkoehler, currently above me in this thread, suggests the ophttp:// and ophttps:// in front of users to open in 1Password. There is a bookmarklet for this here:

http://www.macstories.net/links/1password-4-1/

Kyle

AgileBits

Re: 1Password Watchtower Mac App Integration

#14

Post by AGKyle » Thu, May 01, 2014, 4:41 PM UTC

erikcw wrote: post #7

infra178 wrote: post #3

Earlier quoted context omitted.

How do you get around the lack of bookmarks in the 1password browser for ios?

I often just copy and paste the passwords from 1Password into Chrome for IOS. Chrome sync is the one feature that prevents me from using 1Password's IOS browser for anything but the most casual use. Now if AgileBits could figure out a way to integrate with Chrome Sync, that would be something...

Do you mean strictly for bookmarks?

I'm not sure how feasible this is, having never looked into it, but I can certainly pass this along as an idea if you can confirm the request for only bookmarks. Again, no promises because it might be locked down pretty heavily.

Kyle

AgileBits

Re: 1Password Watchtower Mac App Integration

#15

Post by gwkoehler » Thu, May 01, 2014, 4:42 PM UTC

infra178 wrote: post #3

bluetidepro wrote: post #2

This is a neat integration by 1Password! 1Password is probably my favorite Mac/iPhone app that I use. Their product is always top notch. Great work guys!

How do you get around the lack of bookmarks in the 1password browser for ios?

My method: use mobile Safari, and when I need to log in, put "op" in front of the URL (so it looks like "ophttp://" or "ophttps://"). Press Enter, this launches 1password and points its browser at the URL, ready to autofill.

Re: 1Password Watchtower Mac App Integration

#16

Post by masklinn » Thu, May 01, 2014, 5:12 PM UTC

AGKyle wrote: post #11

ColinDabritz wrote: post #4

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

[I work for AgileBits, makers of 1Password] Thanks for the feedback! Filling into sites and gathering the necessary information for this I think is far easier than determining how a password change takes place. We have an algorithm that we've developed over years that is constantly changing in subtle (and not so subtle) ways to make filling more accurate. Some of the biggest changes in a long time will be coming in t…

> Filling into sites and gathering the necessary information for this I think is far easier than determining how a password change takes place.

Maybe start talking it out with browser developers and big websites stuff so there's a way to standardise an endpoint or in-page meta-information allowing for automated password reset?

Re: 1Password Watchtower Mac App Integration

#17

Post by jhgg » Thu, May 01, 2014, 5:28 PM UTC

Kyle,

Are there any plans to update the Android version of the app? I love 1Password on my mac, but on my nexus 5, the experience sucks! Anything in the pipeline on that? Or is agilebits just focused on OSX/iOS for now?

Thanks!

Re: 1Password Watchtower Mac App Integration

#18

Post by AGKyle » Thu, May 01, 2014, 5:30 PM UTC

jhgg wrote: post #17

Kyle, Are there any plans to update the Android version of the app? I love 1Password on my mac, but on my nexus 5, the experience sucks! Anything in the pipeline on that? Or is agilebits just focused on OSX/iOS for now? Thanks!

Hi!

Absolutely, we've posted a bit about it on our blog:

http://blog.agilebits.com/2013/11/15/1password-4-for-android...

The beta is coming along nicely, you can still sign up for the beta if you wish to try it out.

Let me know if I can do anything else to answer any of your questions or concerns.

Kyle

AgileBits

Re: 1Password Watchtower Mac App Integration

#19

Post by thebranman » Thu, May 01, 2014, 5:41 PM UTC

gwkoehler wrote: post #15

infra178 wrote: post #3

Earlier quoted context omitted.

How do you get around the lack of bookmarks in the 1password browser for ios?

My method: use mobile Safari, and when I need to log in, put "op" in front of the URL (so it looks like "op http://" or "op https://" ). Press Enter, this launches 1password and points its browser at the URL, ready to autofill.

great tip, thanks for this

Re: 1Password Watchtower Mac App Integration

#20

Post by bdcravens » Thu, May 01, 2014, 6:18 PM UTC

senorprogrammer wrote: post #6

ColinDabritz wrote: post #4

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

I wish that affected sites would simply reset my password themselves, internally, and then inform me when I visit the site that I need to use the 'Forgot Password' function to reset my password. As it stands, they get to say they're patched while I remain vulnerable, and now it's my fault if my account is compromised if I don't get around to resetting my password (or they're a site I visited once, years ago, and forg…

That's a tough call, especially for small companies. There are very real support expenses (not every app or it's users have SaaS-like support requirements) that don't make this an easy call.