3 ms·

According to a comment on the blog we get yet another data file format, and still looks like nothing to replace sudolikeaboss (https://github.com/ravenac95/sudo

by zie 9y ago

According to a comment on the blog we get yet another data file format, and still looks like nothing to replace sudolikeaboss (https://github.com/ravenac95/sudolikeaboss https://github.com/ravenac95/sudolikeaboss), despite them saying they were working on it. Mostly it looks like new eye candy, and apparently some speedups, not that it was slow before.

nothrabannosir 9y ago
This is incredibly frustrating, to be honest. They offer a CLI tool but it's completely separate from the GUI session, which means juggling envvars and typing your master password many times. Apple's keychain, while uglier than a Fiat Multipla and harder to use than a Wiimote on a CRT, at least does get this right. But apparently bold text and 21st century 1337speak sell better than a CLI integration. Unfortunately, I can't say I'm surprised. I guess the silver lining is: this can only mean password managers are not just used by security professionals anymore, and are actually becoming mainstream. Hurray :/
- zie 9y ago
  Agreed 100%.
- aerotwelve 9y ago
  Out of curiosity, do you use the CLI tool for feeding private keys and/or passwords into scripts, environment variables, or other software that you write? I had no idea they had a CLI implementation, and I've been looking for something that manages server/api keys as well as cloud service passwords. I imagine there's a better way to do this using enterprise key management software, but I no longer work for a place w/ this kind of budget.
  - zie 9y ago
    I'm the parent comment, but yes, among other things. for enterprise key management, I recommend Hashicorp Vault (https://www.vaultproject.io/ https://www.vaultproject.io/) it's OSS so no giant budget required. There is a CLI available as a 3rd party app that works with newer 1P versions and talks to your local 1P vault: https://github.com/peacetara/slab/blob/master/src/python/README.md https://github.com/peacetara/slab/blob/master/src/python/REA...
  - nothrabannosir 9y ago
    yes, notably 99designs’ aws-vault.[1] They only support keychain and plain file backends on OS X, and I’m trying to write a 1Password backend for it. Half of which will be in a separate lib.[2] Honestly the more I use it the less I understand how any company can allow employees to store AWS creds in a plain text file :/ lack of alternatives, I’m afraid. As is apparent from this thread :) 1 https://github.com/99designs/aws-vault https://github.com/99designs/aws-vault 2 https://github.com/hraban/go-onepassword https://github.com/hraban/go-onepassword

by zie 9y ago

nothrabannosir 9y ago

This is incredibly frustrating, to be honest. They offer a CLI tool but it's completely separate from the GUI session, which means juggling envvars and typing your master password many times. Apple's keychain, while uglier than a Fiat Multipla and harder to use than a Wiimote on a CRT, at least does get this right. But apparently bold text and 21st century 1337speak sell better than a CLI integration. Unfortunately, I can't say I'm surprised. I guess the silver lining is: this can only mean password managers are not just used by security professionals anymore, and are actually becoming mainstream. Hurray :/

zie 9y ago
Agreed 100%.
aerotwelve 9y ago
Out of curiosity, do you use the CLI tool for feeding private keys and/or passwords into scripts, environment variables, or other software that you write? I had no idea they had a CLI implementation, and I've been looking for something that manages server/api keys as well as cloud service passwords. I imagine there's a better way to do this using enterprise key management software, but I no longer work for a place w/ this kind of budget.
- zie 9y ago
  I'm the parent comment, but yes, among other things. for enterprise key management, I recommend Hashicorp Vault (https://www.vaultproject.io/ https://www.vaultproject.io/) it's OSS so no giant budget required. There is a CLI available as a 3rd party app that works with newer 1P versions and talks to your local 1P vault: https://github.com/peacetara/slab/blob/master/src/python/README.md https://github.com/peacetara/slab/blob/master/src/python/REA...
- nothrabannosir 9y ago
  yes, notably 99designs’ aws-vault.[1] They only support keychain and plain file backends on OS X, and I’m trying to write a 1Password backend for it. Half of which will be in a separate lib.[2] Honestly the more I use it the less I understand how any company can allow employees to store AWS creds in a plain text file :/ lack of alternatives, I’m afraid. As is apparent from this thread :) 1 https://github.com/99designs/aws-vault https://github.com/99designs/aws-vault 2 https://github.com/hraban/go-onepassword https://github.com/hraban/go-onepassword