Android "Password Store" client for pass discontinued

Post by [deleted] » Mon, Oct 21, 2024, 11:09 AM UTC

dailykoder wrote: post #18

too_damn_fast wrote: post #6

In the past two days, the official Syncthing Android client has been discontinued, making the use of KeePass harder. Bitwarden has been trying to move away from a fully FOSS system. And now this?

I've been using keepass for quite a number of years now. I have my database and a security key. I sync my database with dropbox (because I am too lazy to self-host something like nextcloud) between devices and just manually copy my key on everry device. My key was never synced through the internet. I hope that's secure enough and works fine for me. I guess syncthing is just smaller and obviously doesn't need a third…

Post by prmoustache » Mon, Oct 21, 2024, 4:08 PM UTC

toomuchtodo wrote: post #52

prmoustache wrote: post #28

Earlier quoted context omitted.

Tbh the same struggle affect proprietary software. It is more about individual developpers/small teams versus large companies.

You have financial gain to show when proprietary software ends. When FOSS ends, you just have the experience. That’s fine for some, know what you’re getting into.

Post by nazarewk » Mon, Oct 21, 2024, 6:10 PM UTC

blahlabs wrote: post #49

blop wrote: post #41

Earlier quoted context omitted.

yes, it's my biggest worry too. At least with keepassDX on android there is no internet access permission needed by default, but if a compromised update suddenly required it I don't know if Android would prompt about it since all apps have internet access granted without prompting :( I also wish it was possible to block automatic updates of specific apps on the play store... So at least we could be in control over up…

On GrapheneOS there is a prompt when installing an app that asks if you would like to grant network access. I am not sure if that pop up displays if network access is added later in an app update though.

Post by jasonm23 » Tue, Oct 22, 2024, 7:14 AM UTC

WD-42 wrote: post #54

jasonm23 wrote: post #50

Earlier quoted context omitted.

I'm really confused. How do you think that would work with an opensource password manager like pass / password-store.org - The data is stored in Git at a location of your choosing and security level - The data encryption is provided by GnuPG using your personal key This is why I use it, there's no potential for anyone to add a back door, except me. BitWarden, LastPass, etc etc... you have a point, and I would not tru…

pass clients can totally be backdoored. They decrypt the secret to plain text and add it to your clipboard or whatever... could easily shuttle it off somewhere else at that point.

Post by jasonm23 » Tue, Oct 22, 2024, 7:24 AM UTC