Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple unveils 'Passwords' manager app at WWDC 2024

zdnet.com

Post reply on HN
Print view View original

681–690 of 767 posts

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#681

Post by AnthonyMouse »

jesseendahl wrote: post #411
AnthonyMouse wrote: post #315

Earlier quoted context omitted.

It's putting password management into the same basket as the device. Suppose your Apple ID gets compromised. The attacker is a jerk and decides to remote erase your device. Then they use your account for black hat stuff and get it permanently banned, or just erase everything on iCloud too. If the password manager was a different service then you'd still have the password for that service and could get in and recover…

I think you might be making some assumptions about how this stuff works without looking into it. - A lot (most?) people’s Apple Account name is actually their main email address (e.g. Gmail), so they would still control their email address even if their Apple Account was compromised. - You can still recover your Apple Account and iCloud Keychain without any devices (e.g. if phone broke like in your scenario). - Your…

> A lot (most?) people’s Apple Account name is actually their main email address (e.g. Gmail), so they would still control their email address even if their Apple Account was compromised.

But this is an example of not putting all your eggs in one basket. An all-in Apple customer is using Apple as their main email.

> You can still recover your Apple Account and iCloud Keychain without any devices

This assumes that you remember your password, and that the attacker has not changed your password, and that the account has not been permanently disabled for abuse.

> Your passkeys stored in iCloud Keychain are still protected even if your Apple Account has been compromised.

"Protected" means someone needs more than just the iCloud account to get access to them, not that you can re-download them if you lose access to your iCloud account.

It also depends on how your account was compromised. For example, if a thief observes you entering your unlock code and then steals your phone, they have the device they need to access all your passwords too.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#682

Post by brailsafe »

hot_gril wrote: post #675
brailsafe wrote: post #609

Earlier quoted context omitted.

For me it's pragmatic; MacBooks are or have been the best laptops, and Android phones have been the best value for money while also being less locked down. IPhones are just really expensive luxury devices imo. My phone will probably break for some reason out of my control within a few years of getting it, or it'll become outdated, so I want to get the best hardware + software combination I can for around ~$400USD

One point of an iPhone is that it lasts longer, but if you really want new hardware all the time, Android is a cheaper option.

I don't see how that could possibly be true objectively, it's my impression that neither platform has any intrinsic hardware qualities that allow it to last longer, but with a Pixel I do have more control over how long I can keep it running if it doesn't succumb to irreparable physical damage.

Anecdotally, it's also my subtle impression that iPhone users are more inclined to update frequently regardless of how much longevity they could get out of it. I just buy my phone and keep it operational for as long as possible, only buying another if my current one is physically inoperable, and I feel like I'd get to that point more quickly with an iPhone, since parts are more expensive and not as readily available.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#683

Post by hot_gril »

brailsafe wrote: post #682
hot_gril wrote: post #675

Earlier quoted context omitted.

One point of an iPhone is that it lasts longer, but if you really want new hardware all the time, Android is a cheaper option.

I don't see how that could possibly be true objectively, it's my impression that neither platform has any intrinsic hardware qualities that allow it to last longer, but with a Pixel I do have more control over how long I can keep it running if it doesn't succumb to irreparable physical damage. Anecdotally, it's also my subtle impression that iPhone users are more inclined to update frequently regardless of how much l…

Main thing is iPhones get security updates for about 8 years. My iPhone 6S is still fine. Pixel in particular will now get 7 years, but this wasn't the case in the past. Random other Android phones don't have good support, and even third-party repairs might be harder.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#684

Post by brailsafe »

hot_gril wrote: post #683
brailsafe wrote: post #682

Earlier quoted context omitted.

I don't see how that could possibly be true objectively, it's my impression that neither platform has any intrinsic hardware qualities that allow it to last longer, but with a Pixel I do have more control over how long I can keep it running if it doesn't succumb to irreparable physical damage. Anecdotally, it's also my subtle impression that iPhone users are more inclined to update frequently regardless of how much l…

Main thing is iPhones get security updates for about 8 years. My iPhone 6S is still fine. Pixel in particular will now get 7 years, but this wasn't the case in the past. Random other Android phones don't have good support, and even third-party repairs might be harder.

That's a fair point, and the 6s is a great piece of hardware imo. I just find it frustrating that after security updates stop for my mac, I can definitely keep using software that's always worked on it, supposing I have the executable and any third-party backend services are still running. On my old iPad 3, since the App Store is the central software distributor, more and more apps have been pulled off of it at the discretion of the publisher. It was never really that useful of a device to begin with, but to use the same software, I'd need to buy a new piece of hardware, despite new iPads offering practically nothing substantial in terms of added value (for me) since mine came out. They're nice I guess, but not hundreds or thousands of dollars nice when I likely wouldn't use them for anything different.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#685

Post by Jiahang »

rgbrgb wrote: post #598
kgilpin wrote: post #596

I have already been using iPhone Passwords for all my passwords. Anyone else doing this? It autofills passwords on the phone and I can copy a password from the phone Passwords and paste it on my MacBook. Whenever I do a password change, I have to do it on my phone, so that the new one will be stored. But that is fine with me. I’m happy to do that in exchange for being freed from “password managers”.

yep, incredibly convenient. big reason i use safari as the default on my MacBook too. honestly safari is great these days for everything except web3.

why except web3？

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#686

Post by kelchm »

ipqk wrote: post #127

I've been an avid 1Password user for over 10 years, but since they gone full-throttle targeting the enterprise market, I'm getting more and more annoyed. It's increasingly buggy (right now, it thinks I haven't migrated from 1p7 which causes annoying interstitials that I can't close. Over a month and no fix yet.). They killed standalone vaults. Obvious feature requests (e.g archive an entire vault) sit there for years…

I’m still annoyed by the little things — like the fact they switched from a very native looking 1Password toolbar icon in Safari to the ugly full color icon.

https://1password.community/discussion/128524/add-options-to...

Seriously, this is the kind of thing that an intern could knock out in a week. I don’t understand why it hasn’t been addressed.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#687

Post by NoPicklez »

freedomben wrote: post #491
rootusrootus wrote: post #483

I wonder if the biggest side benefit to a player like Apple getting into this game is the pressure it puts on web site developers to follow some kind of convention with their login forms. The vast majority of the time I have trouble filling a password, it's because the web developer did some wacky shit with the fields that make them unrecognizable, or in the worst case actively prevent pasting a password. It's one th…

There is a convention already, and it's quite simple. There's an "autocomplete" property on an input tag, and you can tell the browser what it's for[1]. Use "username", "email", and "current-password" for example when building a login page. ("new-password" is useful for creating an account or changing password, and the password manager can suggest a new password here instead of trying to autofill with your old passwo…

They're saying that Apple bringing this tech in will force developers to follow this convention, ss from their experience they're not. Not that there isn't a convention but people aren't following the conventions that exist.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#688

Post by citizen_friend »

shmerl wrote: post #669
citizen_friend wrote: post #470

Earlier quoted context omitted.

People always ignore the simpler explanation: it’s more time and work to make something a second time on a platform you don’t know and control.

I wouldn't look for any excuses for someone who is as often nasty as Apple is.

Sounds like this is a personal problem.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#689

Post by drio0 »

gumby wrote: post #305
drio0 wrote: post #281

Earlier quoted context omitted.

Is there a way to export all your passwords on a Windows PC, or from iPhone? I do not have a mac

Why don’t you just install the windows app they announced?

I want to have a copy of all my passwords and Apple does not provide that

I have been stung a few times by apple locking my data within their ecosystem (eg I can’t export my notes from iPhone out without a Mac, or MANUALLY copy each note which is crazy) so I refuse to use any of their apps or features unless I own my data

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#690

Post by rootusrootus »

mym1990 wrote: post #556
rootusrootus wrote: post #486

Earlier quoted context omitted.

My biggest worry about passwords by Apple is that I have even less pull when they screw it up. Not that I have a lot of input in 1Password, of course, but I bet if I get loud enough on HN for long enough, I could get the attention of the CEO. Try that with Apple. As a long time user (sufferer) of Screen Time, I am acutely aware of how badly Apple can screw up software, and how long they can let it go unfixed. Tim Coo…

Can you expand more on the Screen Time issue?

Ugh, where to start. It has all sorts of failures. In no particular order, off the top of my head:

1. It randomly adds in limits for my kids I didn't even put there. I put in an X hour limit, it puts in an Y hour limit, usually duplicated three or four times. Most commonly for the 'All apps' category. I delete those, a few weeks later they start reappearing. Kid complains, I delete them again, rinse & repeat.

2. Somewhat regularly it loses connection to the kids' ipads and doesn't update the settings I change. Usually it'll eventually connect, but it can take a while.

3. Some devices it just refuses to see. iMac? Sure. MacBook Air? Crickets. Why? Who knows. Everything is running the latest software, both computers have the iCloud account authenticated. Sometimes it decides my son has no devices at all. I don't really bother looking at reports any more.

4. Sometimes I get screen time requests (install a new app, ask for more time, buy something, etc), and sometimes ... nothin. I can watch my kid put the request in, I never get it. Sometimes it's flawless.

5. The requests come in via iMessage now, and this tends to be okay on the phone, but it is very destructive on the MacOS Messages app. The requests almost never completely load, for whatever reason, and just spin. I think only once I saw the requests show up on the MacOS Messages app correctly. Eventually the requests conversation gets too many of them spinning, and they drag down Messages until it beach balls. If I'm lucky, I see that one coming as it gets slower and delete the conversation before it gets far enough to hang.

There are probably some things I'm forgetting. It is the buggiest bit of software from Apple that I've ever used. The only other app that routinely annoys me is Music, because it periodically (every day or so) seems to lose authorization or something, and just refuses to play music. But doesn't say why, doesn't reauthorize or ask to reauthorize, just doesn't play anything. I restart the app and it works for another day. That bug has been around for several years now, on multiple computers.

Post reply on HN