Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password to Add Telemetry

blog.1password.com

Post reply on HN
Print view View original

91–100 of 353 posts

Re: 1Password to Add Telemetry

#91

Post by miken123 »

abigail95 wrote: post #74
JohnFen wrote: post #54

Earlier quoted context omitted.

> Anomyous telemetry is not PII. That depends. First, no data collection is "anonymous" when it is transmitted. Any anonymity must come later, and then is only possible if the company aggregates the data with other users and deletes the original data that was collected. PII/Personal Data are squishy terms. In the US, anyway, the legal definitions of what counts as "PII" leaves out an awful lot of actual PII -- so any…

> First, no data collection is "anonymous" Because no network connection is anonymous but as long as you aren't handling PII, GDPR has nothing to say about it. I could sell an app in the EU that just pinged my server once a day. As long as I wasn't keeping a record of who pinged what when, there is no PII. Otherwise everything is PII and you would need consent before every TCP handshake.

> I could sell an app in the EU that just pinged my server once a day. As long as I wasn't keeping a record of who pinged what when, there is no PII.

Data processing is not just about 'keeping a record'. Processing even for a millisecond is also processing.

> Otherwise everything is PII and you would need consent before every TCP handshake.

Consent is not the only ground for data processing. Normally, it would just be performance of a contract, as the user wants something from you.

Re: 1Password to Add Telemetry

#92

Post by mdaniel »

adoxyz wrote: post #2

I've been a 1Password customer for many years. Their product is super solid. The family plan is very generous. I personally don't have an issue with them collecting some telemetry to improve the product. And they've stated they'll offer ways to opt-out.

> Their product ~~is~~ used to be super solid.

Don't get me wrong, it's still light years ahead of the Bitwarden clients and extensions, and that's why I stay, but I for sure would not use the present tense for their quality

Re: 1Password to Add Telemetry

#93

Post by darknavi »

kmfrk wrote: post #78

I've had issues where 1Password wouldn't save my new logins properly, lasting for over a day. Maybe that's why they need the telemetry. Do 1Password do security/privacy audits the way Mullvad do? That's a pretty decent way of building goodwill over time when it comes to decisions like this. It's probably a fine decision, but they should probably have gone to greater lengths to write this blog post in more exhaustive…

If they could use telemetry to deduce which websites were not auto-filling correctly then I'm all aboard.

Re: 1Password to Add Telemetry

#94

Post by mdaniel »

dijit wrote: post #19
AlexandrB wrote: post #15

Earlier quoted context omitted.

> If you already trust 1password to store your credentials I don't, so I'm never upgrading to 1Password 8. The telemetry news only validates my decision. What I consider important in a security product and what AgileBits considers important diverged a while ago and that's ok I guess.

1password 8 definitely feels like a massive UX downgrade over v7. Though I can’t put why into words.

Oh, I can: it's the experience of the edit button mysteriously appearing and disappearing, along with the unforgivable experience reported on r/1Password of some user having edits applied to the wrong item. There but for the grace of God go I, but I for sure have experienced the oft-reported edit button comes and goes nonsense

We shall not even get started on their extension losing its mind for no good reason. Still better than Bitwarden, and they should thank their lucky stars for it or I'd take my money elsewhere

Re: 1Password to Add Telemetry

#95

Post by berberous »

isomorphic wrote: post #75
ploum wrote: post #56

Earlier quoted context omitted.

Migrated to Bitwarden for the opensource years ago. Stayed for cheaper price, linux support, simplicity and "out of my way" philosophy. Never looked back to 1password.

Same. I think here is a good place to shout out to Vaultwarden: https://github.com/dani-garcia/vaultwarden Your password data, back under your own control.

Why does it need a server? Does bitwarden have the ability to just use a local vault?

Re: 1Password to Add Telemetry

#96

Post by minimaul »

TkTech wrote: post #45

My history with 1Password: - Purchase a stand-alone license, getting well-performing and feature-complete native clients with several options for vault sync that are under my control. - Upgrade to 1Password 8, a version that sounds great, but has quietly removed local sync unless you checked forum and blog posts before buying. - Watch the clients go from being native to Electron and losing many, many features. Get fo…

I have a similar history.

The biggest loss for me on v7 -> v8 is 1Password Mini - that's a wonderful little 'browser extension for the desktop', and quick access is just awful to use in comparison.

It's not helped by their responses basically always being "but we like this, so it's better!" - they don't listen to customer feedback any more, and they pair it with their 'quirky' comms style that just comes off as condescending & dismissive. Collecting telemetry doesn't help if they ignore the feedback they already have.

edit: plus, they keep showing hard/impossible to dismiss UI in web pages to try to capture/fill fields, and it makes using the web pages really difficult!

Re: 1Password to Add Telemetry

#97

Post by avtar »

TkTech wrote: post #45

My history with 1Password: - Purchase a stand-alone license, getting well-performing and feature-complete native clients with several options for vault sync that are under my control. - Upgrade to 1Password 8, a version that sounds great, but has quietly removed local sync unless you checked forum and blog posts before buying. - Watch the clients go from being native to Electron and losing many, many features. Get fo…

> Watch browser integrations get progressively worse (check out the reviews on the Firefox extension, oh boy)

This doesn't align with my experience, and I've been using their app/service for years (the Windows & Mac apps, along with the Chrome and Firefox extensions). I don't mean to sound harsh but I'm scrolling through the negative reviews on the Firefox extension page as you suggested, and it's hard to take the majority of them seriously:

"i have never been happy with 1Password. Too frustrating to use."

"TOO DIFFICULT TO SIGN ON."

Re: 1Password to Add Telemetry

#98

Post by doodlesdev »

berberous wrote: post #95
isomorphic wrote: post #75

Earlier quoted context omitted.

Same. I think here is a good place to shout out to Vaultwarden: https://github.com/dani-garcia/vaultwarden Your password data, back under your own control.

Why does it need a server? Does bitwarden have the ability to just use a local vault?

If you're looking for something that's offline first go for pass [0], gopass [1], or any keepass-compatible [2][3][4] password manager and sync the database yourself.

[0]: https://www.passwordstore.org/

[1]: https://www.gopass.pw/

[2]: https://keepassxc.org/

[3]: https://www.keepassdx.com/

[4]: https://strongboxsafe.com/

Re: 1Password to Add Telemetry

#99

Post by minimaul »

helpfulclippy wrote: post #63
ploum wrote: post #56

Earlier quoted context omitted.

Migrated to Bitwarden for the opensource years ago. Stayed for cheaper price, linux support, simplicity and "out of my way" philosophy. Never looked back to 1password.

Same. When I started using 1p, the vault was stored locally, and it was possible to decrypt it at the command line using openssl. They prided themselves on this. They moved to cloud-based, and at one point I went to check if data export worked, and it did not. I opened a support ticket, and before even offering any actual help they wanted to know why I wanted to export my data anyway. Then they wanted me to download…

I remember when they gave enough information about their vault formats that I could write my own linux app to fetch data out of their .opvault format in roughly an afternoon!

Re: 1Password to Add Telemetry

#100

Post by Negitivefrags »

closewith wrote: post #60
Negitivefrags wrote: post #26

Earlier quoted context omitted.

If you don’t collect any identifiable data, then the EU has nothing to say about it.

Unless they have a non-IP based communication system, then they'll fall afoul of the same thing all online analytics services do - they'll be collecting, at least ephemerally, personal data under the EU definition.

It is my understanding that if you do not log the IPs that connect, then you are not collecting personal data.
Post reply on HN