News for hackers. Stuff that matters.
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by miki123211 on Friday October 25, 2024 @02:26AM (#41942742)
Firefox sync made the criminal sin of implementing end-to-end encryption, enabling it by default, and being insufficiently clear to people that their passwords are lost forever when they forget the master password.

This provides a really terrible UX to "normal" users. I woulnd't recommend that option to anybody who doesn't already know what E2E is and what tradeoffs it has.

Google's implementation is a lot better in that regard, at least they offer plenty of avenues for account recovery.

Re:Bitwarden SDK relicensed from proprietary to GPLv3 by bandrami on Friday October 25, 2024 @03:29AM (#41943034)
Presumably the passwords themselves have recovery/reset procedures? I can't think of a good reason to add another risk surface to a password manager given that
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by KPGv2 on Friday October 25, 2024 @09:22AM (#41945008)
Can you identify the password managers that do not implement end-to-end encryption so I can avoid them forever?