1Password: Standalone / Local Vault Option Gone?

Re:1Password: Standalone / Local Vault Option Gone? by DavideNL on Friday July 12, 2019 @11:06AM (#20421231)

> but it would also be true of a desktop app using an offline vault

Well you can set an application firewall to block all internet access of the 1Password app. So, it can't update automatically, and when you manually update it and it would contain malicious code, it still can't connect/upload anything to the internet. You can even use 1Password sync via iCloud, which is handled externally - not by 1Password, but by macOS.

Unfortunately, this can not be done on an iOS device (no app firewall), since Apple locks down everything and decided users may not control their own devices anymore :'(

[ Parent | on HN ]

Re:1Password: Standalone / Local Vault Option Gone? by wool_gather on Friday July 12, 2019 @12:13PM (#20421772)

FWIW, Apple has a "VPN" API that can be used to implement a firewall (or a proxy, or etc.). I don't know whether there's a usable commercial product that does that, but if you're really into it you can certainly write your own.

[ Parent | on HN ]

Re:1Password: Standalone / Local Vault Option Gone? by DavideNL on Saturday July 13, 2019 @03:49AM (#20427010)

Yea, but it doesn't really work because you cannot block on the application level.

You can only block hostnames/ip-addresses, and these often change with updates, so you'd have to constantly monitor and block new hosts after the app starts leaking again.

[ Parent | on HN ]