Live data from Hacker News

1Password Watchtower Mac App Integration

blog.agilebits.com

1–10 of 34 posts

Re: 1Password Watchtower Mac App Integration

#4
Do you know what would be amazing?

The ability to change all vulnerable passwords, automatically as a group.

I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well?

If it were robustly automated, you cold easily rotate your passwords once a month, with very little fuss, for example.

This is really something that authentication schemes could benefit from supporting an automated API for.

Good work on the service. I suspect that heartbleed was the current use case, but this service will be very helpful for future breeches and issues. For example they could alert you that XYZ Service had a data breech, it's fixed, and you should rotate your password.

Great work.

Re: 1Password Watchtower Mac App Integration

#5

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

As a half-way step, they could aggregate and normalize the various stupid rules that sites impose and then automatically generate valid, maximally secure passwords by default. Eventually, 1Password (or similar) could handle e.g. changing them all on a given schedule. I already try to have no passwords older than three months, and it's a PITA.

Re: 1Password Watchtower Mac App Integration

#6

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

I wish that affected sites would simply reset my password themselves, internally, and then inform me when I visit the site that I need to use the 'Forgot Password' function to reset my password.

As it stands, they get to say they're patched while I remain vulnerable, and now it's my fault if my account is compromised if I don't get around to resetting my password (or they're a site I visited once, years ago, and forgot all about).

Simply updating OpenSSL without fixing passwords just shifts the onus to the users.

Re: 1Password Watchtower Mac App Integration

#7
post #3

This is a neat integration by 1Password! 1Password is probably my favorite Mac/iPhone app that I use. Their product is always top notch. Great work guys!

How do you get around the lack of bookmarks in the 1password browser for ios?

I often just copy and paste the passwords from 1Password into Chrome for IOS. Chrome sync is the one feature that prevents me from using 1Password's IOS browser for anything but the most casual use.

Now if AgileBits could figure out a way to integrate with Chrome Sync, that would be something...

Re: 1Password Watchtower Mac App Integration

#8
post #3

This is a neat integration by 1Password! 1Password is probably my favorite Mac/iPhone app that I use. Their product is always top notch. Great work guys!

How do you get around the lack of bookmarks in the 1password browser for ios?

My personal solution is to use https://pinboard.in for all of my bookmarks.

The thing this doesn't provide me are bookmarks (such as banking, servers, etc) that I need to keep more secure than a public site (even with privacy settings). However, most of these types of items are saved in 1Password.

Re: 1Password Watchtower Mac App Integration

#9
post #5

Do you know what would be amazing? The ability to change all vulnerable passwords, automatically as a group. I know it's very challenging because password change/reset procedures vary widely, but that part of the process is still manual. 1Password already automates logins almost entirely successfully. Perhaps password changing can be automated as well? If it were robustly automated, you cold easily rotate your passwo…

As a half-way step, they could aggregate and normalize the various stupid rules that sites impose and then automatically generate valid, maximally secure passwords by default. Eventually, 1Password (or similar) could handle e.g. changing them all on a given schedule. I already try to have no passwords older than three months, and it's a PITA.

Problem: Aggregation and normalization might result in an empty set as contradictory rules prevent harmonization.

Re: 1Password Watchtower Mac App Integration

#10
post #9
post #5

Earlier quoted context omitted.

As a half-way step, they could aggregate and normalize the various stupid rules that sites impose and then automatically generate valid, maximally secure passwords by default. Eventually, 1Password (or similar) could handle e.g. changing them all on a given schedule. I already try to have no passwords older than three months, and it's a PITA.

Problem: Aggregation and normalization might result in an empty set as contradictory rules prevent harmonization.

I think the parent comment is saying that 1Password would record the rules per site, not maintain a global list of rules that satisfies all sites. The latter would indeed yield an empty set, as some sites require a special character and some require no special characters.
Post reply on HN