Live data from Hacker News

1Password for SSH and Git (Beta)

developer.1password.com

291–300 of 406 posts

Re: 1Password for SSH and Git (Beta)

#291

Earlier quoted context omitted.

You are the one who came in here and disputed my claim (and those of others as well) without a single shred of evidence. You still refuse to substantiate your disagreement. Nobody is disputing Moore's Law (and this is the first time you've brought it up!). The dispute is around whether people still experience slowdowns and other bad experiences as a result of excessive memory consumption relative to resources, despit…

You are wrong when you say, "Memory is a precious resource." No "precious resource" doubles every two years. You can either accept that objective fact, or you can continue to try and weasel your way around it, but the fact will remain.

First, average primary system memory in a typical laptop does not double every two years. Growth of average installed memory has been linear, not exponential (see, e.g., https://techtalk.pcmatic.com/research-charts-memory/). Second, even if it did grow, software can consume memory faster than it can be provisioned; there's no law that prevents software developers from writing software that utilizes an arbitrary amount of memory. Put differently, adding more memory does not necessarily ensure the software will not consume it, in the same way that adding more freeway lanes is not a guarantee that gridlock will not ensue, or that moving from an apartment into a mansion is not a guarantee that it won't get filled with stuff.

Re: 1Password for SSH and Git (Beta)

#292

Earlier quoted context omitted.

Not really into replacing vetted, well tested open source software with a proprietary app with cloud storage.

Then don't? It's not like anyone is going to force you into using 1password.

Isn't that what he said? He won't.

Re: 1Password for SSH and Git (Beta)

#293
post #15

Ah neat, the app exposes an ssh agent socket: export SSH_AUTH_SOCK=~/.1password/agent.sock So you would essentially replace Keychain, Gnome-keyring, or the vanilla SSH-agent with 1password. Very nice solution.

Not really into replacing vetted, well tested open source software with a proprietary app with cloud storage.

The bigger issue is the attack surface of the app is now much larger.

Re: 1Password for SSH and Git (Beta)

#294

Earlier quoted context omitted.

You are wrong when you say, "Memory is a precious resource." No "precious resource" doubles every two years. You can either accept that objective fact, or you can continue to try and weasel your way around it, but the fact will remain.

First, average primary system memory in a typical laptop does not double every two years. Growth of average installed memory has been linear, not exponential (see, e.g., https://techtalk.pcmatic.com/research-charts-memory/ ). Second, even if it did grow, software can consume memory faster than it can be provisioned; there's no law that prevents software developers from writing software that utilizes an arbitrary amou…

Aaand now you've gone on to dispute Moore's Law, as if the specificity of the "two years" part was at all critical or even important to our conversation.

Also, that link you provided seriously undercuts your own argument, you do realize that right? It very clearly shows how over 90%+ of computers have 4 GB or more of memory installed, which is plenty to run multiple Electron apps.

Re: 1Password for SSH and Git (Beta)

#295
post #271

And here I am, logging into Linux boxes without entering passwords nor SSH keys thanks to the magic known as Kerberos. Open up my corporate laptop and login with my smart card and username/pass combo, then I can just log into any Linux machine I have authorization (group permissions) to. Been doing it this way for over a decade at this rate. It's like all of these password manager tools were created by people who've…

> It's like all of these password manager tools were created by people who've never seen nor used these existing solutions.

Maybe, but it sounds like your comment was written from a place where you've never had to actually implement one of those existing solutions.

Kerberos is great. It's also a holy terror to implement properly, especially cross-platform, and especially if you need to federate identity.

I've been down that path. While there are trade-offs with any decision, I wholly understand why so many organizations are going to solutions like Okta/Auth0 + Duo + password managers vs the "tried and true" methods of a directory server + Kerberos + SAML federation through Shibboleth

SCIM combined with modern cloud SSO makes life much easier than trying to support Kerberos.

Re: 1Password for SSH and Git (Beta)

#296
post #283

I've been using 1Password for years now, the auto-fill always works. I don't use their command line stuff much, and I have some read some legitimate criticisms about how they communicate secrets on unix-like systems. Apart from that, I'm not sure I understand the dissatisfaction in the comments. Can someone enumerate what's wrong with 1Password? Are tools like BitWarden any better?

I think the majority of it is down to the pre-SaaS customers of the product. 1Password used to have a life time license and would work without any need for 1Password servers. You could backup your vaults anyway you wanted and the various clients would work with a variety of methods for syncing etc.

A lot of long term 1Password users bought this and still use it, but the company no longer really do much to support it having pivoted to completely focus on their subscription offering. Many of their long time customers, many of which are HN users, feel they're getting shafted by the lack of updates etc to those older offerings. From what I understand a lot of the older clients and plugins that worked with the local versions don't get updated anymore. However, I'm only a customer of their subscription offering so someone else might be able to elaborate more.

Re: 1Password for SSH and Git (Beta)

#297
post #236

I've been a huge fan of 1Password for almost ten years now, recommending it to friends and family, but like some of the comments mentioned it feels like the product is trying to move upmarket while dropping support for core features. I've bought their license a couple times as the versions are updated, but they no longer support licenses and only monthly subscriptions. Fine.. I'm happy to pay that to get a great prod…

I definitely understand the aversion to trusting 1password's cloud service, but it's worth noting that their security model is such that it requires minimal/zero trust of the server. Your vault is only ever decrypted on the client side, and the 1password service only ever stores/syncs the encrypted vault. This is why if you lose access to your secret key, your vault can never be decrypted, even by 1password - your se…

> I definitely understand the aversion to trusting 1password's cloud service, but it's worth noting that their security model is such that it requires minimal/zero trust of the server.

It just requires absolute blind trust on their client apps...

> Your vault is only ever decrypted on the client side

Which is a closed source blob, so, again, requires absolute blind trust.

Re: 1Password for SSH and Git (Beta)

#298

I have used 1pass for years. I think I bought my lifetime license sometime in 2014? I loved it and even advocated for our 2000+ company to adopt it back in 2018. I would say in the past 2-3 years it has slowly become an absolute nightmare. I do not recommend it to anyone anymore. They have somehow screwed up the very basic functionality of filling in passwords on any browser I try. They continue to shift features aro…

I have used 1Password since way before the cloud version became the default. I loved the product... and I still do! I moved to the cloud version and the experience has been really slick.

I actually think the product is well thought-out and designed. There are some website where it refuses to work, but these are in the minority, and I blame the websites for breaking 1Password, not 1Password.

Also "a nightmare" -> this feels like an unnecessary hyperbole

Re: 1Password for SSH and Git (Beta)

#299
post #243

I have used 1pass for years. I think I bought my lifetime license sometime in 2014? I loved it and even advocated for our 2000+ company to adopt it back in 2018. I would say in the past 2-3 years it has slowly become an absolute nightmare. I do not recommend it to anyone anymore. They have somehow screwed up the very basic functionality of filling in passwords on any browser I try. They continue to shift features aro…

This is weird, I legitimately have none of these problems. I use Firefox, and the extension story has gotten a bit more odd in the last couple years*, but I don’t feel it’s any less reliable. The way 1p handles 2FA is really slick in my opinion, auto-filling the code after a login screen and even hitting return for me most of the time. Honestly the only rough edge I hit is when browsers try to force their own passwor…

Isn't storing passwords island 2fa in the same place a bad idea?

Re: 1Password for SSH and Git (Beta)

#300
post #15

Ah neat, the app exposes an ssh agent socket: export SSH_AUTH_SOCK=~/.1password/agent.sock So you would essentially replace Keychain, Gnome-keyring, or the vanilla SSH-agent with 1password. Very nice solution.

I wonder why they picker $HOME instead of the obvious choice like $XDG_RUNTIME_DIR.

It's not like I'll ever need to manually interact with the socket, so keeping it out of the way would seem logical.

Post reply on HN