5 ms·
If by people you mean "Hacker News crowd", I don't know. If by people you mean "people in general", just look at their respective website. The answer is rather
by dombili 11y ago
If by people you mean "Hacker News crowd", I don't know.
If by people you mean "people in general", just look at their respective website. The answer is rather obvious.
I contemplated over which password manager to use before deciding on 1Password simply because of its simplicity and usability. I try to be as aware of my privacy and security as possible and even though I was aware of this leak beforehand, I went with 1Password anyway.
"Hacker News crowd" (to be clear, I'm not using this in a derogatory way) usually think about security in terms of how things work technically, but practicality is just as important. If some piece of software is secure but not usable, that doesn't do any good to the user.
KeePassX is plain ugly, has a terrible website that doesn't give any confidence and scares the user by giving them technical details right out of the gate (check their website). I get that it's open source, it's free, probably more secure than 1Password and they most likely don't have enough income to hire as talented designers as AgileBits already employ, but that just doesn't matter to the user.
- tptacek 11y agoWhat makes you believe KeePassX is "probably more secure" than 1Password? I have the opposite impression.
- dombili 11y agoI have no idea, to be honest. I probably said that because it's open source (and I'm aware that "open source" isn't synonymous with "secure"). Come to think of it, I shouldn't have said that because I have no empirical evidence one way or the other.
- therealmarv 11y agoOpposite impression based on what?
- tptacek 11y agoMore than a hunch.
- sillysaurus3 11y agoYou just slandered a security product based on nothing. That wouldn't be a problem if you didn't have a bunch of followers who believe every word you say. But you do, because your analyses are usually decent quality.
- tptacek 11y agoI almost wrote a comment correcting you, but realized I'd just be feeding the drama you're hoping to generate. No.
- sillysaurus3 11y agoWhy would I be hoping to generate drama? Your behavior is very confusing. I was disappointed that you had something to say about that password vault, and then didn't say it. You opted for this weird gray area of "I have more than a hunch it's less secure than 1Password." Huh? Maybe you have nothing to say. It's really strange to see you drop to hunches from substance. One of the best pieces of advice I found on HN was when someone told me to unplug. It helped me a lot. When you start to see everyone as a troll, it might be time to step back a bit.
- JupiterMoon 11y agoCare to share? Or have you already shared with the keepassX developers?
- raz32dust 11y agoYes, I was talking about the HN crowd. I've been using KeepassX for a while now without (m)any usability issues. It's far from perfect, but I believe it is secure (based on the source code), and it works for me, usability-wise. They are working on 2.0 in the git repo too (https://github.com/keepassx/keepassx/commits/master https://github.com/keepassx/keepassx/commits/master)