News for hackers. Stuff that matters.
Re:1Password Secrets Automation by 8fingerlouie on Tuesday April 13, 2021 @03:58PM (#26798290)
> I use a password manager but, as a mostly-Apple user, I see very little reason not to just use iCloud Keychain

Storing 2FA tokens is one thing iCloud Keychain cannot do (yet ?), and it’s the primary reason I use 1Password over iCloud Keychain.

That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s.

I’m currently evaluating using either Password-store or Bitwarden with bitwarden_rs as a backend as I really don’t want my logins synchronized anywhere I don’t control.

Re:1Password Secrets Automation by oarsinsync on Tuesday April 13, 2021 @04:55PM (#26799173)
> That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s.

That's not a Big Sur thing, that's a 1Password thing (I've not upgraded to Big Sur still).

Re:1Password Secrets Automation by sooheon on Tuesday April 13, 2021 @11:02PM (#26802464)
This UI change is what may drive me away from a family plan if it doesn't get addressed.
Re:1Password Secrets Automation by bwoodruff on Tuesday April 20, 2021 @08:47PM (#26884039)
1Password > Prefs > Browsers > Untick 'automatically show inline menu' — may help. If not please write to our support team and we'll be happy to work with you.
Re:1Password Secrets Automation by ERD0L on Wednesday April 14, 2021 @04:48AM (#26804530)
This is the first thing I disable in settings
Re:1Password Secrets Automation by fiddlerwoaroof on Tuesday April 13, 2021 @04:09PM (#26798483)
I think the fingerprint auth stuff Apple’s working on will replace MFA: as I understand it, in Safari, the MacBook’s Fingerprint sensor implements the same protocol as a Yubikey or similar.
Re:1Password Secrets Automation by 8fingerlouie on Wednesday April 14, 2021 @05:33AM (#26804798)
One can only hope (and fear) they utilize the secure enclave for this task.

Hope because it would allow me to utilize my mac as a Yubikey. I have no idea how they would synchronize it to all Apple devices, but i'm fairly certain they will find a way.

Fear because it will pretty much guarantee i cannot use my password manager on other platforms.

I already use Secretive (https://github.com/maxgoedjen/secretive) to store SSH keys in the secure enclave with touch id integration, and it works really well. I also keep a couple of Yubikeys as backup :)