Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password for Linux beta

blog.1password.com

Post reply on HN
Print view View original

141–150 of 254 posts

Re: 1Password for Linux beta

#141

Post by scrollaway »

dyingkneepad wrote: post #139
jaredklewis wrote: post #113

Earlier quoted context omitted.

What's your baseline? While there are theoretically more secure alternatives to using a password managers, the vast majority of people don't have the discipline or skill to implement them effectively. Password managers make security tradeoffs, providing a nice balance of convenience and defense against many of the most important attack vectors. So while it of course possible to come up with basically endless possible…

The baseline is an encrypted libreoffice or txt file where passwords are stored. Then the file is somehow synchronized.

You're describing keepassxc. A keepass file is essentially an encrypted sqlite db.

How is an encrypted odt/txt better?

Re: 1Password for Linux beta

#142

Post by xur17 »

eigenspace wrote: post #11
29athrowaway wrote: post #3

Unpopular opinion: using a password manager as a service is as bad as password reuse: all your passwords behind a single password.

Honestly, I think your opinion is unpopular because it demonstrates a serious lack of understanding or thought. If you re-use the same password for all sites, it takes just one sketchy site being compromised for all of your other sites to become compromised. In the case of a password manager, the manager itself is the one that needs to be compromised, and you have more reason to trust them to avoid being compromised…

> If you re-use the same password for all sites, it takes just one sketchy site being compromised for all of your other sites to become compromised.

And speaking as someone that operates a website accepting passwords, this happens more than you'd think. There are hackers that actively try leaked lists of username / passwords against websites using botnets. If your password is leaked by one website, people will attempt to reuse it on other websites.

Re: 1Password for Linux beta

#143

Post by mcpherrinm »

tayo42 wrote: post #134
SloopJon wrote: post #109

Earlier quoted context omitted.

I definitely have some password manager anxiety. I'm not too concerned about hacks or losing my password database. For me, it's more about the sense of independence, and being able to log in to my accounts using just my noggin. I might be able to remember one or two strong passwords, but not dozens, which is kind of the selling point of a password manager. I use KeePassXC with a password and key file. I sync the data…

password managers feel like vendor lock in. what happens if i need to move to another manager, or i need to sync everything to my phone. they go out of business, they decide to charge more. or if i pay for it and now i cant pay for it anymore. if i sound like an idiot, id love to hear why btw! heh

I use 1Password, and they have an easy CSV export. The lock-in is very weak.

If they were to suddenly disappear, or I can't pay for it, I still have the local copies on my devices that I could export and move to some other system.

Re: 1Password for Linux beta

#144

Post by nemosaltat »

mooman219 wrote: post #91
dastx wrote: post #81

Earlier quoted context omitted.

Bitwarden is great, but I'm getting frustrated at their ridiculous excuses for not implementing fixes. For the longest time bitwarden has been broken in the firefox's private browsing after mozilla deprecated some apis due to security concerns. They've given alternatives but they are just refusing to fix it, to the point of basically saying mozilla needs to fix the issue. What's sad is a similar mechanism is used in…

+1 on 1Password's dedication to fixing issues. I had an obscure field selection issue on their web view and pinged the support email. It was fixed a few days later and they updated me on it. I switched to 1Password from KeePass after 5 or so years because I just got tired of maintaining the data locally and keeping it in sync on my devices that I need the passwords on. I just backup the 1Password database locally now…

I’ve been a happy one-password customer for several years and I switched to the family subscription model to get my parents away from their little notebook of passwords. I had self-hosted a PHP based password manager for a handful of years, before switching to 1P because I wanted a “real app” with tighter OS integration. I’ve had 3 gripes and this solved one of them. The other 2 are

1) Their insistence on 1PasswordX- I want a desktop app, I want tight integration, the browser extensions work just fine if I need something quickly. 2) Poor/no support for key management- storing ssh keys as an encrypted notes is a bad work around.

Re: 1Password for Linux beta

#145

Post by techsupporter »

haunter wrote: post #10

I want to use KeePassX/KeePassXC but haven't really found any iPhone clients with Dropbox syncing + Face ID unlock. So still with 1Password even though I'm not a big fan of it anymore. It works, so there is that.

KyPass supports Dropbox (I use it with WebDAV but Dropbox is present) and Face ID: https://www.kyuran.be/software/kypass/

Re: 1Password for Linux beta

#146

Post by lttlrck »

copperx wrote: post #117
satysin wrote: post #34

Earlier quoted context omitted.

Agreed. I have been using Bitwarden for over 3 years now, paid premium user as well. No big issues, the odd bug a few times but all fixed promptly and didn't impact my ability to access my data. While the Bitwarden apps are not as "pretty" as 1Password's I find them a little simpler to use. Obviously UI design is highly subjective though so your thoughts may be very different :) Anyway yes I highly recommend Bitwarde…

While almost everything is great about Bitwarden, the 5-8 second delay when performing a search is ridiculous (considering I have about 100 records), and I'm considering paying for a better maintained alternative.

I have over a thousand items (!) in my vault and never experience delays in iOS, Firefox or chrome.

Maybe its a syncing related issue, try contacting support.

Re: 1Password for Linux beta

#147

Post by ed25519FUUU »

I still can’t bring myself to pay $5 a month in perpetuity for a password manager.

None of these saas companies ever price single user licenses below $5, even though $1 or $2 would be much more reasonable.

Re: 1Password for Linux beta

#148

Post by SirensOfTitan »

dyingkneepad wrote: post #97

The reasonable person inside me wants to use a password manager, yet the paranoid in my brain is terrified. I read all those texts explaining why password managers are better, yet I am still afraid. I keep thinking in attack vectors such as someone compromising the Play Store and submitting a malicious app or other similar stuff. I even have a Bitwarden account and have some passwords stored on it. I also considered…

Add MFA to the 1Password account so that sign ins from new devices need a second factor like a yubikey or Duo.

Re: 1Password for Linux beta

#149

Post by Fnoord »

alschwalm wrote: post #87
mapgrep wrote: post #69

Earlier quoted context omitted.

Not knocking the project, which sounds cool, but the absolute last thing I want to self host is a password database exposed to the internet. Hard pass on that element. 1password used to have a peer to peer sync mode that I loved. No need for a server anywhere. You would open it on your Mac and then open it on your phone and if they were on the same network they would self discover. Too inconvenient, perhaps, for most…

I'm concerned about self hosting a service like this as well, so I put mine behind an nginx reverse proxy that requires a client cert for auth. That way, an attacker won't even be able to reach the bitwarden server to try to get in (unless there's a vulnerability in nginx).

You can host it all behind Wireguard. That way, an attacker doesn't have access to your Nginx proxy. After all, why would the whole internet need access to your Bitwarden server (or a reverse proxy serving it)?

Re: 1Password for Linux beta

#150

Post by mekster »

mapgrep wrote: post #69
bilal4hmed wrote: post #6

I would like to throw out Bitwarden out there. Cross platforms, works on everything and can be self hosted if you so desire.

Not knocking the project, which sounds cool, but the absolute last thing I want to self host is a password database exposed to the internet. Hard pass on that element. 1password used to have a peer to peer sync mode that I loved. No need for a server anywhere. You would open it on your Mac and then open it on your phone and if they were on the same network they would self discover. Too inconvenient, perhaps, for most…

Enabling 2fa sounds like a good enough security for most.

If you mean they may have a vulnerability, they've gone through a few security audits.

If you mean you can't adequately keep your own server secure, then pass it.

Post reply on HN