Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Bitwarden does not export attachments in backups

news.ycombinator.com

Post reply on HN
Print view View original

111–120 of 128 posts

Re: Tell HN: Bitwarden does not export attachments in backups

#111

Post by jiveturkey »

TingPing wrote: post #98
jiveturkey wrote: post #91

Earlier quoted context omitted.

Those 3 points are valid but not even the worst bits. It sounds like you are just griping about the switching cost issues, and didn't get much further than initial setup. Once you actually try to use BW in earnest, you'll find it's noticeably worse than 1PW in most ways. The most glaring is that it is meh at detecting login forms and poor at detecting new account signup. These are the 2 primary flows for a pw manager…

I've used BW for years and have never had issues detecting forms.

I've used BW for over a year now. The inability to detect forms is a common problem, with long standing open bugs being documented elsewhere in this post.

I distinctly remember, the very first new login I created after moving over to BW. Nothing happened and I just assumed BW was simply not that chatty about such things. BW fails to detect a significant number of signups for me. It's not a rare occurrence. I've had to train myself to create the login explicitly, rather than hope for auto detection.

1PW has taken a wrong direction, so I "suffer" with BW. However I don't recommend it to anyone. (no one asks, so it's not much of a concern)

Re: Tell HN: Bitwarden does not export attachments in backups

#112

Post by jiveturkey »

webdog wrote: post #110
jiveturkey wrote: post #91

Earlier quoted context omitted.

Those 3 points are valid but not even the worst bits. It sounds like you are just griping about the switching cost issues, and didn't get much further than initial setup. Once you actually try to use BW in earnest, you'll find it's noticeably worse than 1PW in most ways. The most glaring is that it is meh at detecting login forms and poor at detecting new account signup. These are the 2 primary flows for a pw manager…

>Those 3 points are valid but not even the worst bits. It sounds like you are just griping about the switching cost issues, and didn't get much further than initial setup. 100% My rule-of-thumb is that onboarding has to be *incredibly* easy; it's the front door of an application, the user's first substantial interactions. If it's not easy or streamlined, I start wondering how the rest of the UX is. And in this case,…

It's really pitiful that the selection of password managers is so awful. It should be hard to choose because they're all so good.

Re: Tell HN: Bitwarden does not export attachments in backups

#113

Post by foobiekr »

mdaniel wrote: post #65
foobiekr wrote: post #37

This is sadly common. 1Password does not either.

Incorrect, I just tested it: $ unzip -l 1PasswordExport-ILESALYKVFDNJH3K24FEO3QRHM-20220611-100457.1pux ... 1952 01-01-1980 00:00 files/dbp6d2jjtfbwbp5tnqx6vw5jaa__developerID_installer.pem

When exporting data, in any of the supported formats, 1password will warn the following:

Some of the items you attempted to export were documents. There is currently no support for exporting Documents from 1Password.

So apparently, it exports pems. That's great. It doesn't export most attachments.

edit: This is apparently new behavior in 1password8. If you have upgraded to the very latest version, the .1PUX export does seem to finally solve this problem. But that's new - it was not true for any previous version.

Re: Tell HN: Bitwarden does not export attachments in backups

#114

Post by mdaniel »

foobiekr wrote: post #113
mdaniel wrote: post #65

Earlier quoted context omitted.

Incorrect, I just tested it: $ unzip -l 1PasswordExport-ILESALYKVFDNJH3K24FEO3QRHM-20220611-100457.1pux ... 1952 01-01-1980 00:00 files/dbp6d2jjtfbwbp5tnqx6vw5jaa__developerID_installer.pem

When exporting data, in any of the supported formats, 1password will warn the following: Some of the items you attempted to export were documents. There is currently no support for exporting Documents from 1Password. So apparently, it exports pems. That's great. It doesn't export most attachments. edit: This is apparently new behavior in 1password8. If you have upgraded to the very latest version, the .1PUX export do…

I'm sorry that you think just because I only chose to show one file type that it only exported one file type

    unzip -l 1PasswordExport-ILESALYKVFDNJH3K24FEO3QRHM-20220611-220354.1pux | grep files/ | grep -Eo '\.[^.]+' | sort | uniq -c
       3 .2019-10-31
       1 .4742E0C72E589FA7
       5 .B5CA9C4DAF6FA034
       1 .asc
       2 .btskey
       8 .cer
       4 .certSigningRequest
      11 .com
       5 .gmail
       6 .gpg
       6 .hopperLicense
       1 .io
       2 .jpg
       7 .json
       1 .keybase
       1 .onepassword7-license-mac
       4 .p12
       2 .paperkey
       1 .pdf
       8 .pem
       1 .png
       2 .tar
      14 .txt

Re: Tell HN: Bitwarden does not export attachments in backups

#115

Post by 411111111111111 »

mdaniel wrote: post #109
BrandoElFollito wrote: post #103

Earlier quoted context omitted.

Bitwarden has the same. I just generated wobble-swaddling-reflex-repost

One will observe that I said "click button, get fake security answers" and I just tried it with BW Version 2022.5.1 (3283) and there was for sure no such "add security questions" option I do believe you that it's possible to generate a password using battery-horse-stable but BW places the burden upon the user to create a "security questions" section, fill in the security question prompt, now save the item at this poi…

I don't even remember the last time I had to input a security question, so personally I wouldn't have wanted them to waste their time with such a feature. Isn't the feature inherently moot when you're saving the answer in you password manager? The only way to forget your password is if you're unable to access the password manager, which also contains the answer to the security question.

At that point you're just as secure inputting any random letters to effectively disable the security question unlock.

Re: Tell HN: Bitwarden does not export attachments in backups

#116

Post by stereoradonc »

webdog wrote: post #59

This is very salient, I just left some feedback related to lack of functionality, in their community forums yesterday. I bought a subscription to use Bitwarden against 1Password, trying to switch from 1P to BW. I dislike 1P's arrogant customer service (Read their community forums for about an hour, and look at many of the responses from staff regarding feature requests) and my attitude towards them really soured when…

1 Password has "toxic optimism"

Re: Tell HN: Bitwarden does not export attachments in backups

#117

Post by BrandoElFollito »

mdaniel wrote: post #109
BrandoElFollito wrote: post #103

Earlier quoted context omitted.

Bitwarden has the same. I just generated wobble-swaddling-reflex-repost

One will observe that I said "click button, get fake security answers" and I just tried it with BW Version 2022.5.1 (3283) and there was for sure no such "add security questions" option I do believe you that it's possible to generate a password using battery-horse-stable but BW places the burden upon the user to create a "security questions" section, fill in the security question prompt, now save the item at this poi…

Since security questions are not standardized (in the same way as a password field is) you may or may not recognize them (as a password manager).

I store the questions and answers in the notes section because I am sure I will have the right answers to the right questions.

I also expect this to be at the same place where passwords are generated because, well, these are passwords.

My hope is that idiotic idea born in the head of a psychopath will die soon (this is just a hope, taken into account the horrible, horrible incompetence of people who design the security of sites, especially password contraints)

Re: Tell HN: Bitwarden does not export attachments in backups

#118

Post by SSLy »

411111111111111 wrote: post #115
mdaniel wrote: post #109

Earlier quoted context omitted.

One will observe that I said "click button, get fake security answers" and I just tried it with BW Version 2022.5.1 (3283) and there was for sure no such "add security questions" option I do believe you that it's possible to generate a password using battery-horse-stable but BW places the burden upon the user to create a "security questions" section, fill in the security question prompt, now save the item at this poi…

I don't even remember the last time I had to input a security question, so personally I wouldn't have wanted them to waste their time with such a feature. Isn't the feature inherently moot when you're saving the answer in you password manager? The only way to forget your password is if you're unable to access the password manager, which also contains the answer to the security question. At that point you're just as s…

commercial citimanager is an example of a stupid site that asks for those on any auth flow

Re: Tell HN: Bitwarden does not export attachments in backups

#119

Post by manmal »

mdaniel wrote: post #69
manmal wrote: post #55

Earlier quoted context omitted.

Why is such a JSON file too big to use if it’s only ever handled by streaming parsers? SQLite would be a better backup format ofc.

Can you explain how sqlite is a better container for arbitrary binary files than zip? I mean, I know "INSERT INTO files ('my-file.bin', X'CAFEBABE...')" gets it into sqlite, but how would a sane person get that content back out?

This discussion is about Base64-in-JSON vs SQLite, not binaries-in-ZIP vs SQLite.

Re: Tell HN: Bitwarden does not export attachments in backups

#120

Post by Hellion »

clircle wrote: post #51
Hellion wrote: post #49

I’m still on KeePass. I keep meaning to get off of it but it more or less works okay (not great) I use windows, Debian, iOS, and Firefox as the browser on desktop. Any recommendations?

Keepassxc plus the browser extension? Also, if it aint broke…

I’m not going to say it’s broken, but it sure is rough.
Post reply on HN