Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password for Linux development preview

discussions.agilebits.com

Post reply on HN
Print view View original

211–220 of 352 posts

Re: 1Password for Linux development preview

#211

Post by yoz-y »

pjmlp wrote: post #174
suchire wrote: post #136

Earlier quoted context omitted.

More likely it is the overhead of multiplatform support that motivates them to use Electron. Their support matrix is pretty big now: iOS, Android, Web, Mac, Windows, browser extensions, Chrome OS, and Linux

Amiga, Atari, Mac OS, MS-DOS, Windows, UNIX, with teams that reached around 10 maximum. How did we ever managed without Electron?!? Man we were 1337!

Tbh, not that many programs with exception of games supported all the platforms. And games were built on top of VMs or engines.

Re: 1Password for Linux development preview

#212

Post by 0XAFFE »

rawoke083600 wrote: post #208

I have been looking into a good passwd-manager for linux and my android phone for the last week or so: Most of them look so "blingy" I can't get myself to trust it ! I'm 51% convinced myself just to code my own (I know , I know) I've recently switched over from Ubuntu-Genome to Ubuntu-i3 and now for the life of me, I can't get chrome to sync/autofill/remember my passwords :( - Same user just different desktop/wm, why…

I would go for bitwarden[1]. It's free software, can be self hosted and is available on most platforms and has nice browser addons. If you want to go the self hosted route, you might want to look into bitwarden_rs[2] because it uses way less resources than the official server.

[1] https://bitwarden.com/

[2] https://github.com/dani-garcia/bitwarden_rs

Re: 1Password for Linux development preview

#213

Post by maxhille »

rawoke083600 wrote: post #208

I have been looking into a good passwd-manager for linux and my android phone for the last week or so: Most of them look so "blingy" I can't get myself to trust it ! I'm 51% convinced myself just to code my own (I know , I know) I've recently switched over from Ubuntu-Genome to Ubuntu-i3 and now for the life of me, I can't get chrome to sync/autofill/remember my passwords :( - Same user just different desktop/wm, why…

https://www.passwordstore.org/

Using it for years now and am happy with it. Although it start from this pretty basic setup, you can extend your usage with mobile apps and browser extensions.

Re: 1Password for Linux development preview

#214

Post by nanoha »

jchw wrote: post #176
karlshea wrote: post #152

Earlier quoted context omitted.

It's made with proper craftsmanship and care on the Mac (which is primarily where I've been using it for years). The Windows client is much better after the last major release, but it's never been as slick as the Mac version (the biggest wart now is the system tray/browser extension popup). 1Password X looks nice until you try and use it, and all the company reps on the forums are very argumentative about any feature…

They were also pretty dismissive of Linux for a long time, so it's kind of funny to hear it as one of their biggest requests. 1Password X narrowly prevented me from switching for a while, but I've come to see alternatives as generally better options. Yeah, they're not as flashy, but I think Bitwarden and Keepass XC do a great job. Keepass XC may even be doing a better job at security . At least in some dimensions. ht…

FWIW cache side channel attacks are primarily a threat on (shared) cloud platforms, but not as much [1] on personal devices. Considering that 1password runs in its own process and that most personal devices should have Meltdown mitigations in place, it would be prohibitively difficult to successfully launch a cache side channel attack to extract the password from outside of your device, especially at scale. Attackers would attempt to find other software vulnerabilities instead.

I think it would indeed be nice if 1password scrubbed sensitive data from memory, but not a complete deal breaker if it didn't. I do wonder if this could be more of a problem on 1passwordX, though.

[1]: not zero, but still

Re: 1Password for Linux development preview

#215

Post by rawoke083600 »

0XAFFE wrote: post #212
rawoke083600 wrote: post #208

I have been looking into a good passwd-manager for linux and my android phone for the last week or so: Most of them look so "blingy" I can't get myself to trust it ! I'm 51% convinced myself just to code my own (I know , I know) I've recently switched over from Ubuntu-Genome to Ubuntu-i3 and now for the life of me, I can't get chrome to sync/autofill/remember my passwords :( - Same user just different desktop/wm, why…

I would go for bitwarden[1]. It's free software, can be self hosted and is available on most platforms and has nice browser addons. If you want to go the self hosted route, you might want to look into bitwarden_rs[2] because it uses way less resources than the official server. [1] https://bitwarden.com/ [2] https://github.com/dani-garcia/bitwarden_rs

Thank you !

Re: 1Password for Linux development preview

#216

Post by techntoke »

pseudalopex wrote: post #131
techntoke wrote: post #82

Enpass is a really nice password app that works on Linux, and allows you to sync with various cloud providers. I have since switched to Password Store though which is open source and uses GPG for encryption, so you can pick your own algorithms.

Enpass isn't open source and the only security audit skipped Linux.[1] [1] https://dl.enpass.io/docs/EnpassSecurityAssessmentReport.pdf

Did 1Password pass an audit for Linux? I now use pass so I don't have to worry about it anymore. I trust GPG and Ed25519.

Re: 1Password for Linux development preview

#217

Post by panpanna »

andialo wrote: post #160
guessmyname wrote: post #122

Earlier quoted context omitted.

> The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron? Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. GTK nor Qt have that type of UI elements, they are obviously HTML elements stylized with CSS. Another hint is in the files contained inside the Debian package used during the Linux installation [2]: root@3cb1637b3070:/# ap…

> Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. I love this. It was my first reaction when I used MS Teams ... shit, it's electron and the I got the horrible user experience as usual. And in MS Teams even the font and its rendering is hardcoded and the devs are refusing to do anything about this! So when I use MS Teams I need to look at blurry text. EDIT: And they bundle libffmpe…

Why do they need libffmpeg??

I want my security critical apps to be as small as possible, not a huge pile of everything and the kitchen sink.

Re: 1Password for Linux development preview

#219

Post by panpanna »

fmakunbound wrote: post #162
guessmyname wrote: post #122

Earlier quoted context omitted.

> The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron? Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. GTK nor Qt have that type of UI elements, they are obviously HTML elements stylized with CSS. Another hint is in the files contained inside the Debian package used during the Linux installation [2]: root@3cb1637b3070:/# ap…

Heh. What does the password manager use OpenGL and ffmpeg for? I guess the binary is 130MB(!) is the electron part?

Looking forward to seeing my passwords stolen by a zero day shader vulnerability...

Re: 1Password for Linux development preview

#220

Post by panpanna »

_b8r0 wrote: post #206

I was a 1Password user from when it was fully self-hosted until they started pulling bait and switch tactics to move people to subscriptions and online vaults[1]. I also had Windows licences, and Windows was certainly a 2nd class citizen while I used 1Password. And of course, it doesn't look like the 1Password Linux client is open source. The back-end certainly isn't. I switched to Keepass[2] initially, synchronised…

I think keepass has the base functions covered, they just need a slightly better UI and a simpler way to sync passwords.

Thankfully, it's open source so I'm sure someone with fix that soon ;)

Post reply on HN