Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple unveils 'Passwords' manager app at WWDC 2024

zdnet.com

Post reply on HN
Print view View original

761–767 of 767 posts

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#761

Post by dvngnt_ »

zer0zzz wrote: post #585
dvngnt_ wrote: post #583

Earlier quoted context omitted.

keepassxc works for me on android, windows, and mac

keepassxc is incredible, truly slept on. I use safari keychain as well, as a copy. But my master store is keepass. It boggles my mind that people pay for 1password. Btw, is keepassxc on Android now or are you referring to one of the many Android keepass apps? I use keepassium on iOS. I pay for protonmail and also store a copy in protonpass. Proton pass has a nice web interface and doesn’t require me to copy a keepass…

My mistake on android i'm using KeePassDX https://www.keepassdx.com/ open source

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#762

Post by beart »

int_19h wrote: post #758
beart wrote: post #337

Earlier quoted context omitted.

If you are using a device that previously accessed your vault, it will be cached and accessible. It just won't sync until you regain network connectivity.

Is there an actual guarantee that all passwords will be cached (and not just e.g. the N most recently accessed ones), and that the cache will not expire at some point?

I'm not sure, but I'm also not sure there's a guarantee that my self-hosted password vault won't die in the middle of a busy day.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#763

Post by int_19h »

beart wrote: post #762
int_19h wrote: post #758

Earlier quoted context omitted.

Is there an actual guarantee that all passwords will be cached (and not just e.g. the N most recently accessed ones), and that the cache will not expire at some point?

I'm not sure, but I'm also not sure there's a guarantee that my self-hosted password vault won't die in the middle of a busy day.

That failure can be mitigated by having a local backup, though. In general, with local stuff, it's not so much that the guarantees are better, it's that you can dial them in yourself to the level you feel comfortable at.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#764

Post by eastbound »

criddell wrote: post #125
eastbound wrote: post #121

Earlier quoted context omitted.

It’s important, otherwise that means any locally-running binary (maven, npm) can steal all of your passwords, since they are in clear on your computer.

Does macOS sandbox things like maven or npm? Do they need read access for everything the user can see?

MacOS asks when “Terminal” wants to access the Downloads or Documents or the Contacts, etc.

However it asks once, across all Terminal programs, for the entire lifetime. So if you’ve ever used “find ~/Documents -…”, then Maven can access it too.

My opinion about this is that we’ll progressively go towards a Dockerization of the builds, which is the only one that gives developers confidence about the sandboxing.

It should be required by SOC2/PII certifications, though. As in, I already think I’ve seen an insurance ask something like “Are accounting documents present on a machine where compilation is executed” or maybe it was “Is it possible to install new programs on machines where sensitive documents are managed?”

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#765

Post by wtetzner »

sunshinerag wrote: post #313
wtetzner wrote: post #300

Earlier quoted context omitted.

I think they want one login, but don't want it all controlled by one company. I think they either like or just don't notice that everything they do is controlled by one company at first, until they see something shiny and cool that another company is doing, and realize how difficult it is to switch.

What would they prefer instead? controlled by another company? controlled by many companies? manage it on their own?

I don't think they've thought it through that far.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#766

Post by mrtesthah »

crubier wrote: post #743
mrtesthah wrote: post #638

Earlier quoted context omitted.

when every app loads an entire duplicate browser stack then your RAM is wasted out of cheapness and negligence. Moreover, I shouldn’t need a cutting edge microprocessor just to look at my saved passwords. Multiplied across 15 million 1Password users, even 1 second amounts to about six months of collective time wasted for each app launch. I would never hire any developer who disregarded their users’ time, UI experienc…

50% of people on HN seems unable to understand that developing UIs using web technologies is 2-3x faster than using Native frameworks. If anything, just from the benefit of not having to develop 5 versions of the UI (MacOS, Windows, Linux, iOS, Android) but just 1 responsive web app. In my perspective clearly the blatant disregard for UI experience is wanting to develop native apps just for hypothetical RAM savings o…

Something being ubiquitous in the marketplace does not automatically translate into it being objectively or materially "better" for consumers.

Fast food is everywhere because it's cheap and fast. And diabetes and heart disease rates are skyrocketing worldwide. Is that "winning" in your eyes?

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#767

Post by mbs159 »

_w1tm wrote: post #719
mbs159 wrote: post #706

Earlier quoted context omitted.

I would instead jokingly say that you would have to pay me to use 1Password. KeepassXC does have collaborative features and online sync if you just drop the Keepass file in a shared cloud - I use it this way and it's easy to set up. Also, more importantly, the password database is not stored in some server God knows where.

> Also, more importantly, the password database is not stored in some server God knows where. Well..

I keep my KeepassXC vault stored at my home, on a Nextcloud instance.
Post reply on HN