4 ms·

Given the change to their business model I am concerned they can push an update, where the next time I unlock my vault it syncs my master password and/or decryp

by wepple 9y ago

Given the change to their business model I am concerned they can push an update, where the next time I unlock my vault it syncs my master password and/or decrypted vault to their cloud. Maybe time for an open source password manager?

tedmiston 9y ago
I'm not sure where that concern is founded. They've been extremely clear that: - both products will continue to be supported - your master password doesn't sync to their cloud - your vault doesn't sync to their cloud unless you're using the subscription version and when it does sync, it's encrypted
- _jal 9y ago
  Well, no, unless I missed something, they have not been clear that local-storage 1Password will continue to work. They have carefully left the door open to changing that at some undefined point in the future. At which point I will migrate away. I love the apps (use it on MacOS and iOS), but local-only storage and non-cloud sync are my hard requirements. I'm willing to pay a monthly rent, but will not 'cloudify' my passwords.
  - tedmiston 9y ago
    Did you see the links included in my parent post? The founder specifically said that standalone vaults will continue to be supported. You don't have to sync your standalone vault to any service if you don't want to. Though of course it'd be difficult to use both the desktop and mobile apps if you don't sync somehow.
    - robin_reala 9y ago
      Will continue to be supported for 6 and 7. Nothing beyond that.
      - tedmiston 9y ago
        To be fair 7 is not even out yet. I don't know many companies that talk about product releases more than one version in the future before release.
        deong 9y ago
        Sure, but when we're talking about a core foundational feature, they do. Richard Stallman would absolutely be willing to say, "We 100% guarantee that gcc will never become non-free software" instead of "we realize that not all gcc users are ready to move to non-free software yet, and we promise that versions 7 and 8 will continue to be free software". For a lot of people here, not remotely storing the vault is such a core foundational feature.
        _jal 9y ago
        I did read the blog post you referenced, and that's exactly why I believe they intend to go cloud-only. Saying something like "we will never force users into cloud storage and sync" when talking about a product like this just isn't that hard, unless that's exactly what you plan to do. Many software vendors have corrected misperceptions when changes seem to point in a direction some users don't want to follow. This is not a case of misperception. The way they've talked about this make it quite plain that's where they want to go, and the careful phrasing ("at this time", "yet") makes it obvious that they intend to.
azinman2 9y ago
It wouldn’t because you have to pay for their service first.
mikepurvis 9y ago
There are lots of them out there to choose from. And being able to audit the secure portions is great, but a password manager is the perfect example of what free solutions often don't do well— you need to have a seamless experience across multiple platforms including mobile, and you need to have fairly deep integrations into multiple web browsers, which are notoriously fickle and need to be tracked closely. The killer feature of 1Password (on Android at least) is that it comes up as a keyboard and can type long passwords into any apps. That seems like exactly the sort of fussy integration that would be really hard to build and maintain in something without commercial backing.
- Nullabillity 9y ago
  KeepShare's auto-fill works 99% of the time for me, and it also has a keyboard for when that fails. Commercial[1] but GPL[2]. This stuff isn't exactly dark magic that only AgileBits can do. [1]: https://play.google.com/store/apps/details?id=com.hanhuy.android.keepshare https://play.google.com/store/apps/details?id=com.hanhuy.and... [2]: https://github.com/pfn/keepshare https://github.com/pfn/keepshare
- wepple 9y ago
  Yeah, valid point. I forget that people use browser integration. My use case is iOS-only, with sync across a small number of devices, which dropbox is perfect for. Fairly simple to build.

by wepple 9y ago

tedmiston 9y ago

I'm not sure where that concern is founded. They've been extremely clear that: - both products will continue to be supported - your master password doesn't sync to their cloud - your vault doesn't sync to their cloud unless you're using the subscription version and when it does sync, it's encrypted

_jal 9y ago
Well, no, unless I missed something, they have not been clear that local-storage 1Password will continue to work. They have carefully left the door open to changing that at some undefined point in the future. At which point I will migrate away. I love the apps (use it on MacOS and iOS), but local-only storage and non-cloud sync are my hard requirements. I'm willing to pay a monthly rent, but will not 'cloudify' my passwords.
- tedmiston 9y ago
  Did you see the links included in my parent post? The founder specifically said that standalone vaults will continue to be supported. You don't have to sync your standalone vault to any service if you don't want to. Though of course it'd be difficult to use both the desktop and mobile apps if you don't sync somehow.
  - robin_reala 9y ago
    Will continue to be supported for 6 and 7. Nothing beyond that.
    - tedmiston 9y ago
      To be fair 7 is not even out yet. I don't know many companies that talk about product releases more than one version in the future before release.
      - deong 9y ago
        Sure, but when we're talking about a core foundational feature, they do. Richard Stallman would absolutely be willing to say, "We 100% guarantee that gcc will never become non-free software" instead of "we realize that not all gcc users are ready to move to non-free software yet, and we promise that versions 7 and 8 will continue to be free software". For a lot of people here, not remotely storing the vault is such a core foundational feature.
      - _jal 9y ago
        I did read the blog post you referenced, and that's exactly why I believe they intend to go cloud-only. Saying something like "we will never force users into cloud storage and sync" when talking about a product like this just isn't that hard, unless that's exactly what you plan to do. Many software vendors have corrected misperceptions when changes seem to point in a direction some users don't want to follow. This is not a case of misperception. The way they've talked about this make it quite plain that's where they want to go, and the careful phrasing ("at this time", "yet") makes it obvious that they intend to.

azinman2 9y ago

It wouldn’t because you have to pay for their service first.

mikepurvis 9y ago

There are lots of them out there to choose from. And being able to audit the secure portions is great, but a password manager is the perfect example of what free solutions often don't do well— you need to have a seamless experience across multiple platforms including mobile, and you need to have fairly deep integrations into multiple web browsers, which are notoriously fickle and need to be tracked closely. The killer feature of 1Password (on Android at least) is that it comes up as a keyboard and can type long passwords into any apps. That seems like exactly the sort of fussy integration that would be really hard to build and maintain in something without commercial backing.

Nullabillity 9y ago
KeepShare's auto-fill works 99% of the time for me, and it also has a keyboard for when that fails. Commercial[1] but GPL[2]. This stuff isn't exactly dark magic that only AgileBits can do. [1]: https://play.google.com/store/apps/details?id=com.hanhuy.android.keepshare https://play.google.com/store/apps/details?id=com.hanhuy.and... [2]: https://github.com/pfn/keepshare https://github.com/pfn/keepshare
wepple 9y ago
Yeah, valid point. I forget that people use browser integration. My use case is iOS-only, with sync across a small number of devices, which dropbox is perfect for. Fairly simple to build.