Re:1password is considering a self-hosted option to store va...
by eropple on Sunday August 08, 2021 @03:44PM
(#28109483)
What's your alternative?
Re:1password is considering a self-hosted option to store va...
by jrm4 on Monday August 09, 2021 @10:28AM
(#28117280)
It's not really different or separate from the whole "Free Software/Open source" thing; there's no easy answer.
Though there's enough potential public harm such that looking at "public health" models is not a bad idea. Most places you don't have to pull out your wallet to get a Covid vaccine, you shouldn't have to pull out your wallet to get good password safety, for roughly the same reasons -- the harm from one "infection" can spread quickly.
The technology to store passwords safely has a marginal cost of zero (it's software). People storing passwords in third party places increases the threat surface, always. Finally, it's "ecological" in that safety/security of this sort needs to be evenly distributed to work its best.
I'm not saying we shouldn't pay people to make things safer, we absolutely should. But this is a bad model for it.