Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Proton Pass: Open-Source and Encrypted Password Manager App

proton.me

Post reply on HN
Print view View original

91–100 of 114 posts

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#91

Post by roughly »

esdf wrote: post #40
thumbuddy wrote: post #19

Wasn't there some article or something claiming that this company was a NSA honeypot or something? Or am I imagining that.

You might be thinking of https://encryp.ch/blog/disturbing-facts-about-protonmail/ edit: I'd like to inject a reminder that protonmail doesn't encrypt all of your mailbox contents. From their privacy policy: "we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, attachment name, message subject, and message sent and received times"

> "we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, attachment name, message subject, and message sent and received times"

Is there any of that that’s not basically required by the fact that they’re running an _email_ service?

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#92

Post by jsnell »

indigochill wrote: post #22
GoofballJones wrote: post #10

I know it may be nitpicking or just pedantic, but they say on their page "Your data also never goes to the cloud, as we own and manage our own server infrastructure." But...if you upload your data to their servers (so it can go to all your devices), isn't that the "cloud"?

I think in general one might consider "the cloud" to be virtual resources on hardware shared with third parties. So of course AWS/GCP/Azure, but DigitalOcean would probably also qualify since to my knowledge droplets are virtual servers on shared hardware. Although renting virtual resources on shared hardware can be convenient (much easier to provision virtual resources than real servers), there are a couple of drawb…

So if you store a file in OneDrive or Google Drive, you'd say it's not storing a file in the cloud? No third parties involved there after all. Just you, the service provider, and the hardware owned and operated by said service provider in their own datacenters.

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#93

Post by kemotep »

protonmail wrote: post #84
kemotep wrote: post #46

With Bitwarden supporting passkeys soon[0] is there any announcement from Proton that they would as well? Seems odd to release a password manager at this time and not mention at least eventually supporting WebAuth/FIDO2/passwordless. 1Password, Google, Apple, and likely Microsoft are all going to be having some level of passkey management. For middle of 2023, it seems like at least a good feature to mention is going…

PassKey support is indeed coming to Proton Pass.

Thanks for the update. I will certainly keep an eye for it.

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#94

Post by microflash »

vsskanth wrote: post #34

Does this reliably detect username password fields on mobile ? 1password is getting really bad on that

Sadly no. It is a hit or miss. Particularly, URL match detection is comically bad. I also despise the way the browser extension injects code in every webpage where it detects forms. There's also no way to manually trigger the autofill.

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#95

Post by kup0 »

Would like to see web/desktop clients for this. When I used it recently I found the unexpandable pop-up overlay in the browser to not be adequate for managing my hundreds of logins- it just felt annoying to be confined to such a small "window"- also would like to see along with that more options for managing items in batches (select multiple and move to another vault, etc).

EDIT: Credit cards are available. Somehow I missed that! Might have gotten released in the time since I tried it which hasn't been long at all...

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#96

Post by cquintana92 »

kup0 wrote: post #95

Would like to see web/desktop clients for this. When I used it recently I found the unexpandable pop-up overlay in the browser to not be adequate for managing my hundreds of logins- it just felt annoying to be confined to such a small "window"- also would like to see along with that more options for managing items in batches (select multiple and move to another vault, etc). EDIT: Credit cards are available. Somehow I…

Credit cards are supported and available already!

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#98

Post by vsskanth »

microflash wrote: post #94
vsskanth wrote: post #34

Does this reliably detect username password fields on mobile ? 1password is getting really bad on that

Sadly no. It is a hit or miss. Particularly, URL match detection is comically bad. I also despise the way the browser extension injects code in every webpage where it detects forms. There's also no way to manually trigger the autofill.

Thanks

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#99

Post by omniglottal »

cumshitpiss wrote: post #50
luke-stanley wrote: post #48

It grinds my gears when password managers bundle 2FA/MFA without pointing out how this weakens the security of it, or discussing mitigations. "Proton Pass makes 2FA easier with an integrated authenticator that stores your 2FA codes and automatically displays and autofills them." Is it really multiple factor auth if you're using the same device for the password and automatically filling in the token? It's not a unique…

Nothing wrong with your second factor being the same device. The point is to combine something you know with something you own. The thing which you own can contain your passwords too.

When the something you own contains passwords, it replaces something you know and all you are left with is one factor: the device.

Re: Proton Pass: Open-Source and Encrypted Password Manager App

#100

Post by mcluck »

huijzer wrote: post #54
mcluck wrote: post #29

Earlier quoted context omitted.

Hard disagree. I've been using it on Ubuntu for over a year now and it's worked absolutely perfectly

In the end, we can only rely on anecdotal evidence, but my experience is that it doesn't work on NixOS and the issues are also mostly full of people who encounter multiple problems [1, 2, 3]. [1]: https://github.com/ProtonVPN/linux-app/issues/110 [2]: https://github.com/ProtonVPN/linux-app/issues/109 [3]: https://github.com/ProtonVPN/linux-app/issues/96

I don't know what I did to get so lucky. I'm on Ubuntu and have the following versions: cli@3.13.0, protonvpn-nm-lib@3.14, proton-client@0.7.1

I've even written a couple of tools that manage my connection through the CLI automatically and it all Just Works. The only issue I ever had was when I had to force shutdown my machine for an unrelated reason and I didn't have an internet connection until I opened and closed Proton VPN. I'm sure someone smarter than me could have just reset the interface they were using or something

Post reply on HN