Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden integrates with OneCLI agent vault

onecli.sh

Post reply on HN
Print view View original

21–30 of 48 posts

Re: Bitwarden integrates with OneCLI agent vault

#21

Post by Uvix »

rschiavone wrote: post #13
AnonC wrote: post #12

Tangential: Where is Bitwarden on the below roadmap right now? It wasn’t even good to users, but was an alternative to 1Password and others that had long crossed this bridge. ‘Here is how platforms die: first, they are good to their users; then they abuse their users to make things better for their business customers; finally, they abuse those business customers to claw back all the value for themselves. Then, they d…

What's wrong with 1Password?

They switched from a purchase with local vault storage model (where you could sync it to the cloud if you wanted to) to subscription-only with cloud storage they control.

Re: Bitwarden integrates with OneCLI agent vault

#23

Post by antonyt »

falcor84 wrote: post #18
post-it wrote: post #7

[flagged]

Is there anything actually bad with that writing (other than implying that theirs is the first system to solve this)? AI has been rlhf post-trained to generate text that people find to be clear to read. Are you now looking to reject clear writing just to spite AI labs?

Pieces of writing don’t really exist in isolation. Your opinion of a given chunk is formed not only by it, but by everything else you have read.

So in one part the negative reaction is to staleness. Everything sounds the same.

If it was all the same but dry, terse, and to the point (like technical writing), it wouldn’t be so bad.

But it’s repetitive with an annoying, breathless, get-ready-to-be-impressed voice that many of us find grating.

Re: Bitwarden integrates with OneCLI agent vault

#24

Post by lucideer »

I really don't understand the HN comments here.

Lots of assumptions that the article is AI-authored (it could be but I'm not seeing overtly obvious signs - it's quite readable) & a lot of ungrounded assumptions that this is somehow related to Bitwarden integrating AI into their product.

I really thought reading comprehension among HN users was better than this.

Re: Bitwarden integrates with OneCLI agent vault

#25

Post by rvz »

OneCLI does not even have a security audit and a VC backed password manager believes that it is secure enough to integrate in their password manager.

I could not be anymore bearish on Bitwarden than before after looking at this and very glad that I don't use them.

Re: Bitwarden integrates with OneCLI agent vault

#26

Post by JaggedJax »

rvz wrote: post #25

OneCLI does not even have a security audit and a VC backed password manager believes that it is secure enough to integrate in their password manager. I could not be anymore bearish on Bitwarden than before after looking at this and very glad that I don't use them.

I don't understand why this would change any opinion on Bitwarden. Bitwarden offers an API and OneCLI calls the Bitwarden API. How does a 3rd party calling Bitwarden's API say anything about Bitwarden?

Edit: I can see on Bitwarden's site they also call out their support for OneCLI, so I suppose that looks like Bitwarden saying they approve of and recommend OneCLI. But I see recommending an open source solution as a lot less problematic than recommending any other random private startup solution.

Re: Bitwarden integrates with OneCLI agent vault

#27

Post by 8cvor6j844qw_d6 »

rvz wrote: post #25

OneCLI does not even have a security audit and a VC backed password manager believes that it is secure enough to integrate in their password manager. I could not be anymore bearish on Bitwarden than before after looking at this and very glad that I don't use them.

[dead]

Re: Bitwarden integrates with OneCLI agent vault

#28

Post by rvz »

lucideer wrote: post #24

I really don't understand the HN comments here. Lots of assumptions that the article is AI-authored (it could be but I'm not seeing overtly obvious signs - it's quite readable) & a lot of ungrounded assumptions that this is somehow related to Bitwarden integrating AI into their product. I really thought reading comprehension among HN users was better than this.

There are worse things to mention about OneCLI as it looks like a completely vibe-coded mess, seeing that CLAUDE.md and Claude itself being one of the contributors [0]

Perhaps the most damning discovery is that they don't even do basic dependency pinning [1] [2] which just risks another supply chain attack.

As soon as I saw that, that was everything I needed to know about the project. No security audit whatsoever and Bitwarden believes this is something worth integrating.

[0] https://github.com/onecli/onecli/graphs/contributors

[1] https://github.com/onecli/onecli/blob/main/packages/ui/packa...

[2] https://github.com/onecli/onecli/blob/main/packages/db/packa...

Re: Bitwarden integrates with OneCLI agent vault

#29

Post by SkyPuncher »

These tools are useful, but I can't help to feel like they're solving the wrong part of the problem. I really don't have much concern that an agent has access to one of my credentials. Outside of production, most of these credentials are going to be limited in privilege and self-rotatable.

What remains terrifying is the ability to exfil important data or run commands that are malicious.

Re: Bitwarden integrates with OneCLI agent vault

#30

Post by mrweasel »

Uvix wrote: post #21
rschiavone wrote: post #13

Earlier quoted context omitted.

What's wrong with 1Password?

They switched from a purchase with local vault storage model (where you could sync it to the cloud if you wanted to) to subscription-only with cloud storage they control.

Short of using pass, what are some good alternatives? My main critic of 1Password has been the cost, but it is a very good password manager, and price seems to have gone down... Or at least the dollars has weakened enough that the price has come down for me.
Post reply on HN