Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden Acquires Passwordless.dev

bitwarden.com

Post reply on HN
Print view View original

81–90 of 399 posts

Re: Bitwarden Acquires Passwordless.dev

#81

Post by qwerpy »

lumb63 wrote: post #60
sph wrote: post #53

Earlier quoted context omitted.

Ah for fuck's sake. It keeps happening to all the software I love. I guess I'll have to stop relying on convenience (I was a 1Password user years ago) and go 100% open-source. None of the libre offerings seem to be as convenient and polished, but at least they're not into some VC's pocket ready to squeeze as much profit as possible out of my paid membership. What's a good OSS alternative that works with iOS and Linux…

I use KeePass. It’s up to you to sync passwords and they’re stored locally. I see those as features despite that they’re inconvenient.

I use cloud storage to store the kdbx file and sync it across a PC and my phone. It’s pretty awesome 99% of the time and just works. Once in a while you get a merge conflict and it’s not so good.

Re: Bitwarden Acquires Passwordless.dev

#82

Post by PassageNick »

candiddevmike wrote: post #50
arianvanp wrote: post #11

Earlier quoted context omitted.

it's just WebAuthn with an easier to understand name. However passkeys depends on a yet to be published standard for QR codes + bluetooth + websockets for doing WebAuthn from a second device. But that is planned to be published soon.

Just recently tried to add WebAuthn to an app and was shocked at how complicated the spec is and how quirky the implementation ends up being. The biggest thing I couldn't easily figure out is how to use it properly. It seems like hybrid auth with your phone or FIDO gives you sign in, and local could be used for sessions? It's hard to make heads or tails from it. The developer UX was also pretty bad, ArrayBuffers was…

Yeah, it is non-trivial to implement, but not impossible. Some folks go that route.

There are SaaS solutions that implement it for you and make it easy to include in your app.

Re: Bitwarden Acquires Passwordless.dev

#84

Post by ssgodderidge »

cpsns wrote: post #44
gagabity wrote: post #13

Earlier quoted context omitted.

Also Bitwarden recently raised 100M from VC so yeah, the clock is ticking now.

> Bitwarden recently raised 100M from VC I wasn’t aware of this, but I’m glad I am now. If that’s the case it’s time to look elsewhere or self host, VC funds and acquisitions are rarely good for users so I’ll assume the worst.

My guess is they will follow 1Password and have more strategies to monetize users. I wonder what the difference between the two services will be at the end of the day.

Re: Bitwarden Acquires Passwordless.dev

#85

Post by ESchack »

switch007 wrote: post #51
AdmiralAsshat wrote: post #4

As a recent convert to Bitwarden from LastPass, I start to get a bit nervous when I see acquisitions happening. LastPass getting acquired was the beginning of the end for it, IMO, before stagnating into criminal negligence. Granted this is Bitwarden acquiring rather than being acquired, but I still worry it leads to a trend of building "portfolio value" rather than focusing on the product. I sincerely hope I'm wrong.

I’d bet on KeePass 2 longer term. KeepPassCX has been around 10 years (forked from a project started 8 years before that). Actively developed, cross platform. There are decent apps for android and iOS (eg Strongbox) I’m going to migrate off 1Password to it soon

I did this some time ago when 1Password announced switching from having native apps to being containerized web apps. Have not regretted it one bit.

Re: Bitwarden Acquires Passwordless.dev

#86

Post by yoavm »

sph wrote: post #53
gagabity wrote: post #13

Earlier quoted context omitted.

Also Bitwarden recently raised 100M from VC so yeah, the clock is ticking now.

Ah for fuck's sake. It keeps happening to all the software I love. I guess I'll have to stop relying on convenience (I was a 1Password user years ago) and go 100% open-source. None of the libre offerings seem to be as convenient and polished, but at least they're not into some VC's pocket ready to squeeze as much profit as possible out of my paid membership. What's a good OSS alternative that works with iOS and Linux…

As mentioned in other comments, BitWarden has both OSS client and server implementations. You can keep using it and if something goes wrong (or earlier, if you wish) you can always run it yourself.

Re: Bitwarden Acquires Passwordless.dev

#87

Post by Jerrrry »

Your passwords shouldn't leave your device.

Chrome's password manager is pushing it.

Everything else should be considered malware.

I don't understand how such a 'techy' crowd here on HN can be so belligerent with this security vs convenience trade off.

KeePass locally, gmail yourself an encrypted backup. That's it. FFS.

Re: Bitwarden Acquires Passwordless.dev

#88

Post by lcnPylGDnU4H9OF »

qwerpy wrote: post #81
lumb63 wrote: post #60

Earlier quoted context omitted.

I use KeePass. It’s up to you to sync passwords and they’re stored locally. I see those as features despite that they’re inconvenient.

I use cloud storage to store the kdbx file and sync it across a PC and my phone. It’s pretty awesome 99% of the time and just works. Once in a while you get a merge conflict and it’s not so good.

Even merge conflicts have been a lot better for me in recent years. My only worry with KeePass is that I have to rely on potentially sketchy client applications but I'm also fortunate enough to have the skills to make my own if I really felt the need. It's one of the few "not-my-solution" pieces of software which continually gives me a sense of data ownership.

Re: Bitwarden Acquires Passwordless.dev

#89

Post by lumb63 »

qwerpy wrote: post #81
lumb63 wrote: post #60

Earlier quoted context omitted.

I use KeePass. It’s up to you to sync passwords and they’re stored locally. I see those as features despite that they’re inconvenient.

I use cloud storage to store the kdbx file and sync it across a PC and my phone. It’s pretty awesome 99% of the time and just works. Once in a while you get a merge conflict and it’s not so good.

I run an SSH server on my laptop and SFTP it to my phone via Strongbox when I’m local.

Re: Bitwarden Acquires Passwordless.dev

#90

Post by phyphy »

cdev_gl wrote: post #35
paulryanrogers wrote: post #18

Earlier quoted context omitted.

BitWarden is open source on both ends. So worst case one can self host then fork clients. (Server has already been reimplemented independently.)

This is true, but LastPass proved that by the time the worst case occurs it's already too late. A security breach means, at minimum, redoing all your passwords, and these sites are a very compelling target. OTOH I wouldn't want to self-host because I know I'm not going to spend the same amount of time and effort a full security staff would, even if my self-hosted box would make a much less attractive target. It's qui…

I thought a security breach wasn't possible due to zero knowledge encryption.
Post reply on HN