News for hackers. Stuff that matters.
Re:Suspicious iOS KeePass Client by egberts1 on Sunday May 21, 2023 @12:03PM (#36022285)
I really really like Strongbox.

My only resistance from going the route of strongboxsafe is the lack of app-specific PIN, opposed to OS-specific PIN that is still missing from the free version.

While a master password covers the specific database, the PIN covers the app.

This is a two-problem for me there:

1. No OS-specific PIN/passcode in free version

2. No app-specific PIN-passcode in free version.

Ideally, a minimum of either one should be available in a free version. A wider acceptance should borne with this simple feature in the free version.

Also Netwrix is more enterprise-ready with their SOC 2, ISO 27001 and HIPAA ready but that is a moot point for most SMBs, SMEs, family-servers and homelabs.

I do do like the simple fact that Strongbox has it all out with their Github repository.

https://github.com/strongbox-password-safe/Strongbox

Re:Suspicious iOS KeePass Client by ssbash on Sunday May 21, 2023 @12:15PM (#36022387)
You have two options:

1. Pay and support this small developer. A password manager is a critical tool that needs to be constantly updated to support the latest OS. This isn't Adobe, it's a bootstrapped indie developer making an app for a small audience. I think the free version is already quite generous. Plus Strongbox includes a one time purchase for all platforms, no subscription unlike 1Password or Bitwarden.

2. Compile and build from source. It's an open source app, you are free to sideload the app if you want to.

Re:Suspicious iOS KeePass Client by egberts1 on Sunday May 21, 2023 @12:32PM (#36022543)
An excellent case for StrongBox Safe, support the indie who did all the hardwork. This would save you, the end-user, from having to do the following:

Sideloading a self-compile app for Apple ecosphere often requires a DUNS ID by Apple App store which in essence will plunge you, the developer, into a yearly subscription.

Sure that one can do a TestApp, but that one-time DUNS ID requirement still remains.

Re:Suspicious iOS KeePass Client by dingledork69 on Sunday May 21, 2023 @12:41PM (#36022611)
All of the above is only necessary due to Apple's walled garden, which has been shown again to be distributing malware.

On a sane operating system you can just download the binary, install (or "side-load") it and you're done. No need for any crazy bureaucracy or giving apple tons of money for doing nothing of value.

Re:Suspicious iOS KeePass Client by ssbash on Sunday May 21, 2023 @02:05PM (#36023322)
That is not true. To sideload an app a free Apple Developer is required. A 7 day limit is placed on that app before it has to be refreshed. If you pay for Apple's Developer subscription then that limit is increased to 1 year.

Alternatively you can use Altstore [0] and avoid paying for an Apple Developer subscription.

[0] https://altstore.io

Re:Suspicious iOS KeePass Client by egberts1 on Sunday May 21, 2023 @06:23PM (#36025187)
Oooooo, that is cool to know.

When you say refresh after 7-day, is the original installation of your downloaded developer app gets affected/disabled or that 7-day is just a time-limit on how often you can upload your development app?

Re:Suspicious iOS KeePass Client by Wevah on Sunday May 21, 2023 @07:06PM (#36025459)
The provisioning profile expires after 7 days; you can transfer your development app to your devices as often as you want. Not sure if you lose data, when the profile expires, though.
Re:Suspicious iOS KeePass Client by egberts1 on Monday May 22, 2023 @02:24PM (#36034865)
Right. My bad: DUNS ID is only required if you want over the air (OTA) update to your Apple devices through the use of Mobile Device Management (MDM) tool. (I was looking for ease of use, easiest, that is.)

Was unclear on how to circumvent this DUNS ID for just the sideloading. of apps.

Re:Suspicious iOS KeePass Client by yunohn on Sunday May 21, 2023 @05:22PM (#36024804)
> I really really like Strongbox.

> still missing from the free version

The obvious solution is to pay. Any reason you are opposed to this?

Re:Suspicious iOS KeePass Client by egberts1 on Sunday May 21, 2023 @06:31PM (#36025242)
Not for me. I am currently evaluating Strongbox and will consider a purchase of Strongbox Zero for seemingly unlimited use.

But for others, it should be a caveat that you would not get the full security provided by Strongbox Zero or Strongbox Pro.

Re:Suspicious iOS KeePass Client by yunohn on Monday May 22, 2023 @03:40AM (#36028487)
> a caveat that you would not get the full security

Paying the developer for access to the full security version, while the free one has more than security than most actually use, seems reasonable to me?

Re:Suspicious iOS KeePass Client by egberts1 on Monday May 22, 2023 @04:48AM (#36028870)
ummm, and you expect me to evaluate a freebie that wont keep my password secured enough.

In short, make the leap before you really safely try it out?