News for hackers. Stuff that matters.
Re:1password is considering a self-hosted option to store va... by danieldk on Sunday August 08, 2021 @05:12AM (#28105267)
Semi-related: this survey was announced alongside 1Password 8 for Windows early access. Apparently 1Password 8 for Windows uses Electron and there was some discussion about AgileBits wanting to move to the same architecture on all platforms.

Does anyone know if 1Password 8 on macOS will also be an Electron app? Their Linux Electron app is pretty good and definitely much better than having no 1Password at all. However, this would be a sad ending for what started out as a great, efficient, native Mac-only application.

I can understand why AgileBits would make this choice. For most users, Electron is probably not a big issue, if they'd notice at all. But as someone who loves native macOS apps, it just makes me sad.

Re:1password is considering a self-hosted option to store va... by aikinai on Sunday August 08, 2021 @08:26AM (#28106194)
Thanks for the warning about this. I was already disappointed in the direction 1Password has been taking, and moving to Electron would certainly be the last straw. It’s totally reasonable that they want to cheap out on the actual software and expand their business into more lucrative services, but it’s not what I personally want in a password manager. So hopefully someone else, maybe a lone develop that doesn’t need perpetual growth, will make a good, standalone, native Mac password manager.

Keychain itself is getting better and more fleshed out UX, but it’s still not flexible enough to trust for everything unfortunately.

Re:1password is considering a self-hosted option to store va... by handrous on Sunday August 08, 2021 @03:00PM (#28109201)
I find I have to kinda budget how many electron apps I keep around, to keep things running smoothly. And that's assuming they're all halfway, sorta, well-written. That goes double for anything I might want to leave open, or open frequently. It also applies to "web app" tabs in my browser (even Gmail eats shitloads of memory and spikes CPU usage all the time for mysterious reasons, let alone things like Google Docs, and a bunch of SaaS dashboards are as bad or worse).

If an app is Electron, it gets an extra and fairly rigorous level of "do I need it? What are the alternatives?" treatment, for this reason. Native, or even QT, doesn't get that kind of in-advance scrutiny, since only rarely do they cause any problems, even if I forget about them and leave them on in the background for months.

Re:1password is considering a self-hosted option to store va... by latexr on Sunday August 08, 2021 @10:16AM (#28106865)
> So hopefully someone else, maybe a lone develop that doesn’t need perpetual growth, will make a good, standalone, native Mac password manager.

You may wish to look into Secrets: https://outercorner.com/secrets-mac/

Re:1password is considering a self-hosted option to store va... by aikinai on Monday August 09, 2021 @06:45AM (#28115004)
Thank you so much for this recommendation! This looks like exactly what I hoped existed, basically 1Password without all of the striving to be more than an app. Also, I already have a SetApp subscription so the desktop version is effectively free.
Re:1password is considering a self-hosted option to store va... by 8fingerlouie on Monday August 09, 2021 @06:48AM (#28115028)
I wasn't aware of Secrets. I will certainly look into it.

It appears to check all the boxes that 1Password used to check.

Re:1password is considering a self-hosted option to store va... by jeromegv on Sunday August 08, 2021 @11:39AM (#28107498)
Looks like you’re looking for a reason but none of that was announced or even hinted as happening on macOS. They have one of the best Mac native app, I doubt it’s part of their plan.
Re:1password is considering a self-hosted option to store va... by aikinai on Wednesday August 11, 2021 @10:27PM (#28150980)
Re:1password is considering a self-hosted option to store va... by aikinai on Monday August 09, 2021 @06:53AM (#28115074)
Before this thread, I never considered they might deprecate the native app, but there seemed to be a lot of premonition here that it’s on the horizon.

I wasn’t actively looking to find a replacement, but I was certainly not happy to see them taking venture funding. That’s great in some contexts, but explicit pressure to grow revenue enough to support 500 people and pay back a bunch of venture capitalists isn’t very conducive to writing quality software.

Re:1password is considering a self-hosted option to store va... by mekster on Sunday August 08, 2021 @10:26PM (#28112137)
Your focus on password manager is off.

> maybe a lone develop that doesn’t need perpetual growth, will make a good, standalone, native Mac password manager.

How do you trust this lone developer? Password manager is all about security and having a motivation to chase money has more trust than someone seemingly doing it voluntarily.

And electron app, not sure why people still complain in 2021... unless you're machine is still running with 2GB memory...

Usability is so much more important than using extra 300MB of memory being electron.

Re:1password is considering a self-hosted option to store va... by jamesdf on Monday August 09, 2021 @06:21AM (#28114810)
I moved away from LastPass to 1Password as LastPass changed their app to Electron and it was immediately slower and less usable. On a 32GB RAM machine. But just things like resizing the window were worse. Not always true for Electron, but it made me change in this case.
Re:1password is considering a self-hosted option to store va... by comex on Sunday August 08, 2021 @10:46PM (#28112267)
> Usability is so much more important than using extra 300MB of memory being electron.

I don't know if it's more important, but certainly, Electron apps' poor usability is another reason to avoid them.

While there are exceptions, they tend to lack usable right-click menus, use odd font sizes (everything's too big), have UI elements that behave differently from the platform standard, and, of course, lag, all of which make usability suffer.

Re:1password is considering a self-hosted option to store va... by gumby on Sunday August 08, 2021 @11:15AM (#28107317)
One reason I use 1Password is because it’s a native app. Electron apps never have the affordances of the platform, so are frustrating to use whenever you leave the “happy path”. Because it’s so heavily used this would be a reason to leave it.

Separately, Electron is itself a large piece of code and integrating it would increase the attack surface — of a piece of security code! Another good reason to switch if this comes to pass.

Re:1password is considering a self-hosted option to store va... by mekster on Sunday August 08, 2021 @10:28PM (#28112157)
> Electron is itself a large piece of code and integrating it would increase the attack surface

At the same time, the most audited code it there. Maybe you don't use a GUI browser.

Re:1password is considering a self-hosted option to store va... by another_kel on Sunday August 08, 2021 @02:32PM (#28108928)
To be fair: 1password native app on windows was horrible and felt 3 times slower than 8.0(electron) beta.
Re:1password is considering a self-hosted option to store va... by tailspin2019 on Sunday August 08, 2021 @05:51AM (#28105487)
This would be a real shame. My only complaint about 1Password is occasional performance blips and slowdowns. Which seem to have been getting worse over time (along with unreliable browser integration). I can’t see how moving to electron on Mac would help that…
Re:1password is considering a self-hosted option to store va... by throwaway46294 on Sunday August 08, 2021 @05:36AM (#28105398)
I have heard that Linux was the start, Windows is the next one to get the Electron treatment, and Mac is next.
Re:1password is considering a self-hosted option to store va... by dijit on Sunday August 08, 2021 @06:40AM (#28105725)
But the linux 1Password program is "electron" in name only; it's actually some kind of Rust program; I'm not 100% sure how it works but it's definitely compiled with cargo.
Re:1password is considering a self-hosted option to store va... by soziawa on Sunday August 08, 2021 @07:02AM (#28105836)
What does Electron in name only mean? Either electron is included or it isn't. Whether you are using Rust through native bindings or through WebAssembly does not really matter does it?
Re:1password is considering a self-hosted option to store va... by dijit on Sunday August 08, 2021 @07:58AM (#28106081)
90% of the functionality is written in rust components and the UI is a very slim wrapper around those APIs; it seems.

And even then it looks like the JS is WASM compiled from rust.

It’s not implemented in JavaScript/typescript is what I mean. As such it seems to be lean on my system.

Re:1password is considering a self-hosted option to store va... by mpalmer on Sunday August 08, 2021 @09:37AM (#28106591)
If it is Electron, I don't think you can credibly call an entire Chromium instance a "very slim wrapper".
Re:1password is considering a self-hosted option to store va... by selfup on Sunday August 08, 2021 @09:49AM (#28106674)
There's a chance it's using Tauri (rust) https://tauri.studio/en/ if it's truly not using Electron but a similar concept. However WASM builds in Electron would make more sense if they use the term Electron.
Re:1password is considering a self-hosted option to store va... by danieldk on Sunday August 08, 2021 @02:21PM (#28108826)
No, it's definitely regular Electron:

    % tar ztf 1password-latest.tar.gz | grep "chrome"
    1password-8.1.1.x64/chrome-sandbox
    1password-8.1.1.x64/chrome_100_percent.pak
    1password-8.1.1.x64/chrome_200_percent.pak
Re:1password is considering a self-hosted option to store va... by dijit on Sunday August 08, 2021 @04:28PM (#28109815)
yeah I'm aware it contains chrome, I mentioned that much of the functionality has been moved out and is actually implemented in rust, this is verifiable simply by running `1password --log trace`

EDIT: 168MiB resident memory on my system (just checked).

Though it malloc'd (but never used) 32G, that's worrying.

Re:1password is considering a self-hosted option to store va... by aniforprez on Sunday August 08, 2021 @10:00AM (#28106752)
Link below to the behind-the-scenes article. I have no experience using the Linux app so I'm not sure of the performance but a lot of the core seems to be written in Rust compiled to WASM which is the way it's now being done for their browser extension. Personally everyone keeps cribbing about electron but I hope 1Password has found a way to make good on performance

https://dteare.medium.com/behind-the-scenes-of-1password-for...

Re:1password is considering a self-hosted option to store va... by _moof on Sunday August 08, 2021 @01:31PM (#28108428)
Good lord, it's like they're trying to ruin it.
Re:1password is considering a self-hosted option to store va... by rcarmo on Monday August 09, 2021 @03:51AM (#28113701)
Well, if 1Password switches to Electron on the Mac, then I’m not moving away from 1Password 6…
Re:1password is considering a self-hosted option to store va... by ahmedalsudani on Monday August 09, 2021 @09:38AM (#28116620)
Ugh. Guess it will be time to switch password managers again.