Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The quiet renovation at Bitwarden

blog.ppb1701.com

Post reply on HN
Print view View original

271–280 of 333 posts

Re: The quiet renovation at Bitwarden

#271

Post by ZekeSulastin »

moepstar wrote: post #179
baggachipz wrote: post #166

Say what you will, but the Apple ecosystem's Passwords app and integration works great. It locks me into their services (iCloud), but I don't see them ever charging for it or sunsetting it. (watch me eat my words in the near future)

Password App surely is a good alternative, however i don’t think there are clients for Linux or Windows? …and that is where Bit/Vaultwarden comes into play.

I can't speak for Linux, but it's now part of their iCloud for Windows suite with browser access via extension[1]. Exporting from Bitwarden to Passwords (on an iPhone at least) is (as of this post) a simple Export Vault operation, but non-passwords/passkeys are not supported.

1: https://support.apple.com/guide/icloud-windows/set-up-icloud...

Re: The quiet renovation at Bitwarden

#272

Post by HomeDeLaPot »

holysoles wrote: post #214

While I agree with the concerns raised in this article, I did not enjoy the writing style of it. Almost all of it feels AI generated, and is written in a very combative tone.

You start reading. Then it hits you. The short, choppy sentences. The stock phrases. This wasn't written by a human — this was generated by AI.

Re: The quiet renovation at Bitwarden

#273

Post by hannofcart »

advisedwang wrote: post #209
kjuulh wrote: post #205

At this point it is too high of a risk to store my password elsewhere. I've been screwed over by dashlane, lastpass, potentially bitwarden now, I am with 1password now, but I've had my passwords in all these places, and I've had to change them each time, probably missing a few. I like 1password, it is by far the highest quality product I've used in this category. I moved from BitWarden back then because their browser…

keepass files + syncthing works very nicely for me. For non technical people, I just recommend to use the browser built in password managers. traviso has a good writeup why: https://lock.cmpxchg8b.com/passmgrs.html

I was doing this too until recently. The problem with this setup is more at Syncthing. More specifically, Syncthing Android app has seen some troubling changes in maintainers. The latest maintainer has a very sparse Github profile and an AI generated avatar, so I noped out of installing it right then.

Re: The quiet renovation at Bitwarden

#274

Post by HomeDeLaPot »

danparsonson wrote: post #204
bergheim wrote: post #91

> That’s not a software guy who happened to raise some money. That’s someone whose stated specialty is the PE integration and exit process. Holy smokes has that's not just -> THAT IS become one of my trigger words.

Do we need to keep pointing this out though? LLMs are not going anywhere any time soon and people will keep using them to generate articles. If the content is also nonsense then that's worth talking about, but otherwise comments about LLM style are about as interesting as remarks about typos.

I guess for me, blatant LLM style reminds me of LinkedIn-speak. Both are distracting and come across as fake. Somehow it's more interesting to read something in another human's unique style than to read something that's obviously been passed through a filter.

Re: The quiet renovation at Bitwarden

#276

Post by rpcope1 »

duckmysick wrote: post #103
giancarlostoro wrote: post #92

Earlier quoted context omitted.

Not my project but Vaultwarden is an open source (in Rust) alternative backend for Bitwarden. I believe its been around a while, and is still maintained. https://github.com/dani-garcia/vaultwarden

Question for anyone self-hosting vaultwarden: how reliable is it and how do you harden it? I'm thinking about running it in a container (Podman Quadlet with systemd) behind a VPN, with daily backups with borg. Anything I'm overlooking here?

I've got it running in an LXC container. Other than occasionally updating it, it's been entirely trouble free (I did need to work to get it out of the Docker container but that's a problem most won't have). Honestly one of the most useful and low trouble self-hosted apps I've used next to Dokuwiki. As far as hardening, I have not done a huge amount, but it lives on my LAN and is only reachable via VPN from the outside, which again works surprisingly well even with my Android phone.

I just take ZFS snapshots. I've restored a couple of times that way just to test DR and it worked pretty well.

Re: The quiet renovation at Bitwarden

#277

Post by antran22 »

gchamonlive wrote: post #94
antran22 wrote: post #58

When I first learnt about Bitwarden about 3 years ago, I started hosting Vaultwarden right away. Right now I have one instance for myself and another for my friend's company. Everything runs as smooth as butter. If you can self-host something, do self-host a Vaultwarden instance. If you are (like me) somewhat paranoid about the fact that Vaultwarden hasn't got a proper security audit on its codebase, just run it behi…

Yes, but vaultwarden isn't something you can casually run by yourself without some careful thinking. You are hosting secrets whose longevity is important, so if deploying yourself, take good care of backups and do regular drills, so you validate that the backups work, that they aren't corrupted and that you keep a copy off-site.

Actually, I didn't have any careful planning when I started out self-hosting Vaultwarden. I didn't even have system backup (was just a script kiddie back then, didn't even know about 1-2-3). I have to migrate my instance 3-4 times. But because I'm just hosting Vaultwarden for myself, I can export the whole account from one of the Bitwarden clients (either the extension or mobile app) and reimport it in the new instance. Because I always have at least three devices with active use connected to my Vaultwarden instance, for me this also counts as 3 off-site backup that can be used to re-instate the whole setup.

It is surprisingly very durable and maintenance-free even for a script kiddie like me to maintain. My advice is (at least when it comes to Vaultwarden) don't think too much about this, just selfhost it, at least for yourself. You'll probably be able to manage it when something happen.

Re: The quiet renovation at Bitwarden

#279

Post by aorth »

worksonmine wrote: post #192
Balvarez wrote: post #101

Omg, do we really need to make another app suck? I left last pass years ago, I'll leave again but wow I'm tired of this cycle. Private equity is truly the destroyer of value. The next time will be self hosted. Anyone know of a password manager that can encrypte and live in say Google drive?

How portable do you need it to be? I use pass[1] and it is good. Just a shell script wrapper to gpg and the passwords are encrypted files you can backup and sync anyway you want. [1]: https://www.passwordstore.org/

Another vote for pass. I've been using it for ten years with a git repository. I sync to all my machines and use https://github.com/agrahn/Android-Password-Store on Android. Not a solution for non-technical people though...

Re: The quiet renovation at Bitwarden

#280

Post by DANmode »

cheriot wrote: post #227

Wild to me that Bitwarden raised > $100m from VC. Seems like the kind of thing that would make a nice lifestyle business. The enterprise version never went beyond password management so I'm not sure how this could have generated a viable ROI.

> Seems like the kind of thing that would make a nice lifestyle business.

Don’t see too much of this talk around the comments, anymore!

If you’re seeing this comment: Are lifestyle businesses on your radar?

Please do share.

Post reply on HN