News for hackers. Stuff that matters.
Re:1Password delisting forum posts critical of their new Ele... by gerdesj on Thursday August 25, 2022 @07:10PM (#32601208)
Bear in mind that a keepass database can be read by quite a few apps these days. You and I both use KeepassXC but there is of course Keepass itself (which I also use) and a fair few mobile apps too.

KPXC looks absolutely lovely but for me it lacks one feature: fold up the tree in one click. This sounds a bit naff but:

We have a KPDBX that is used by several people concurrently - mostly Windows via a drive letter, so direct access. One or two use it via a local clone that they sync remotely back to our central copy. One of those insists on ignoring the tree structure and searching instead, causing the tree to expand somewhat, and then syncing that state back via their "save". I found a plugin for my Windows sporting colleagues that folds the tree back up on open, also KP has a right click option to recursively open or close the tree.

KPCX does not have either option and I generally prefer to find an entry by browsing to it.

Not all people work the same way: some open so many tabs on so many browsers that their machine eventually crashes, and they leave KP in a right old state. Others close tabs when their title is occluded or the tab is no longer needed (you can always reopen closed tab). Some leave RDP sessions open for ever on every box ever and some don't.

Anyway, you get the idea!

Re:1Password delisting forum posts critical of their new Ele... by replete on Thursday August 25, 2022 @07:20PM (#32601302)
Thanks for the info.

I just need browser integrations to work and for it to be open source, I was pretty surprised how well the autofill works on Android. No way am I putting my passwords on the cloud, that makes zero sense to me.

Re:1Password delisting forum posts critical of their new Ele... by Groxx on Thursday August 25, 2022 @07:59PM (#32601629)
It makes you entirely dependent on their cloud and vulnerable to their bugs, yeah. It's ridiculous.

As a nice example of the downsides, due to a few clicks while removing a friend's trial account, 1P irrevocably deleted their data immediately. Which was not clear and was not desired. (Not a bug per se, just "wait what, heck no I didn't mean to do that / didn't know it would do that immediately and with no explanatory prompt")

If they hadn't worked so hard to kill off their local backups, it would've been easy to restore access. Instead nope, and they lost quite a few customers immediately.

Re:1Password delisting forum posts critical of their new Ele... by gerdesj on Thursday August 25, 2022 @08:31PM (#32601868)
"No way am I putting my passwords on the cloud, that makes zero sense to me."

Quite right. I use self hosted Nextcloud to get files around. For my sins I own a MS partner firm but I use Arch (BTW)!

Dynamic DNS will always help you to get a presence on the internet unless you are behind NAT and even then, there are remedies (VPNs for example).

Keep it free kids!