Live data from Hacker News

Bitwarden SDK relicensed from proprietary to GPLv3

github.com

61–70 of 381 posts

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#61
post #10

Luckily if they die another will rise up. At this point I’m thinking I’ll just use the Apple Keychain if Bitwarden gets up to no good again.

If I wasn't busy playing with AI stuff then I would be very tempted to build my own password manager cloud service, it feels like a chance to shine shows up at least once every two years in that space.

I don't know what it is, but password managers just love the high-speed enshittification train.

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#62

Thank you to Bitwarden for relicensing a thing to Free/Open License! Unfortunately, I no longer recommend Bitwarden for normal people because the built-in password manager in Firefox is too good. But for anyone with more advance needs (or who doesn't trust a password manager built into a web browser, I always recommend Bitwarden because KeepassXC + syncing is way too difficult for normal people.

Is the Firefox one better than the one Edge has? I've been using that for a while and it seems quite good overall.

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#65

People here are incredibly hard to please. Very clearly a packaging issue that got blown out of proportion. They've done largely the right things for _years_ in terms of security. They've operated pretty transparently in terms of open sourcing. They've allowed vaultwarden to exist, and eventually created a self hostable version as well. But one bad release with a license screw up and nobody is willing to give them an…

> But one bad release with a license screw up and nobody is willing to give them an inch? I don't have a lot of context on the issue. Is it clear it was just a packaging bug, rather than a move towards partially proprietary?

Yeah - they've always used an open-core licensing model with like a few features (used only by business users/applications) behind a proprietary license. They just ended up mixing the code in a way such that the (theoretically open-source) app ended up having some utility functions for the business version mixed in. Since the client apps don't use that functionality, they split the repository so that you can build the app without using any proprietary code.

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#67
post #64

What would be a good way to backup the passwords stored in Bitwarden? I am worried that someday suddenly bitwarden could stop working and I will lose access to all the stored passwords? Should I have a physical copy of all the passwords stored in a vault at home?

Desktop: keepass variants.

Android: Keepass2 android.

Use syncthing to stay in sync.

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#68
post #52

Earlier quoted context omitted.

I store the password vault in dropbox. Done.

100% serious question: how is using dropbox (one cloud) to sync passwords any better or more secure than using a password manager that syncs your vault for you (another cloud)? I see so many "I don't trust so I use dropbox" comments around these parts and I just don't understand what real or perceived threat is being mitigated.

It’s small enough for dropbox’s free tier so it saves me a subscription.

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#69
post #50

Earlier quoted context omitted.

> Unfortunately, I no longer recommend Bitwarden for normal people because the built-in password manager in Firefox is too good Interesting, I've always felt that browser-based password managers provided remarkably little value for most people. Using them on mobile is tricky and platform dependent, it's easy to have local-only, non-synced data and then lose it, and being multi-device is trickier, especially in a work…

Firefox password sync just works. It's one of those things I never think about. Watching friends and family struggle with bespoke, poorly integrated password managers makes me cringe and is one of the big reasons I enjoy the seamless experience of the built-in Firefox password manager.

Does it have the ability to unlock with faceID on ios?

Re: Bitwarden SDK relicensed from proprietary to GPLv3

#70
post #62

Thank you to Bitwarden for relicensing a thing to Free/Open License! Unfortunately, I no longer recommend Bitwarden for normal people because the built-in password manager in Firefox is too good. But for anyone with more advance needs (or who doesn't trust a password manager built into a web browser, I always recommend Bitwarden because KeepassXC + syncing is way too difficult for normal people.

Is the Firefox one better than the one Edge has? I've been using that for a while and it seems quite good overall.

It's not end-to-end encrypted (if you enable account sync), so Microsoft can technically see your passwords. Feel free to switch or not switch based on that information.
Post reply on HN