News for hackers. Stuff that matters.
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by danpalmer on Friday October 25, 2024 @12:17AM (#41942173)
Does it require a Firefox account? Does it only store them locally if you haven't signed in to Firefox? This is the sort of failure I've seen, where people think their passwords are synced but because they didn't sign in years ago it's actually not backed up at all. At least on Chrome you get reminded of that all the time on YouTube/Google search, etc.

I know for Safari all the sync is via iCloud meaning if you're not signed in it's locally stored and vulnerable in that way. Especially as many people can't/don't sign in to their own iCloud on work computers, or don't have a Mac.

Re:Bitwarden SDK relicensed from proprietary to GPLv3 by notpushkin on Friday October 25, 2024 @12:25AM (#41942196)
Firefox reminds you a bunch of times, too. Would be nice if you could just link a new device via QR code (creating an account for you in the background).
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by codys on Friday October 25, 2024 @01:34AM (#41942501)
The original Firefox sync worked like this (with a unique code and pairing instead of an explicit account) (this is so on the nose I suspect you may know this).

This blog post goes over some of that history: https://blog.mozilla.org/services/2014/04/30/firefox-syncs-n...

Re:Bitwarden SDK relicensed from proprietary to GPLv3 by callahad on Friday October 25, 2024 @01:58AM (#41942611)
Didn't expect to click on that link and end up on a blog post I wrote 10 years ago! The old Firefox Sync / PAKE stuff was fantastic for getting sync going between devices... but people wanted backup, not sync. I wonder if we'd do anything differently confronted with the same challenge today.
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by g8oz on Friday October 25, 2024 @10:46AM (#41945776)
Hey I love the syncing
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by neobrain on Friday October 25, 2024 @08:05AM (#41944441)
> Does it require a Firefox account? Does it only store them locally if you haven't signed in to Firefox?

The passwords are available offline, so they are stored locally.