4 ms·

This is incredibly frustrating, to be honest. They offer a CLI tool but it's completely separate from the GUI session, which means juggling envvars and typing y

This is incredibly frustrating, to be honest. They offer a CLI tool but it's completely separate from the GUI session, which means juggling envvars and typing your master password many times. Apple's keychain, while uglier than a Fiat Multipla and harder to use than a Wiimote on a CRT, at least does get this right. But apparently bold text and 21st century 1337speak sell better than a CLI integration. Unfortunately, I can't say I'm surprised. I guess the silver lining is: this can only mean password managers are not just used by security professionals anymore, and are actually becoming mainstream. Hurray :/

zie 9y ago
Agreed 100%.
aerotwelve 9y ago
Out of curiosity, do you use the CLI tool for feeding private keys and/or passwords into scripts, environment variables, or other software that you write? I had no idea they had a CLI implementation, and I've been looking for something that manages server/api keys as well as cloud service passwords. I imagine there's a better way to do this using enterprise key management software, but I no longer work for a place w/ this kind of budget.
- zie 9y ago
  I'm the parent comment, but yes, among other things. for enterprise key management, I recommend Hashicorp Vault (https://www.vaultproject.io/ https://www.vaultproject.io/) it's OSS so no giant budget required. There is a CLI available as a 3rd party app that works with newer 1P versions and talks to your local 1P vault: https://github.com/peacetara/slab/blob/master/src/python/README.md https://github.com/peacetara/slab/blob/master/src/python/REA...
- nothrabannosir 9y ago
  yes, notably 99designs’ aws-vault.[1] They only support keychain and plain file backends on OS X, and I’m trying to write a 1Password backend for it. Half of which will be in a separate lib.[2] Honestly the more I use it the less I understand how any company can allow employees to store AWS creds in a plain text file :/ lack of alternatives, I’m afraid. As is apparent from this thread :) 1 https://github.com/99designs/aws-vault https://github.com/99designs/aws-vault 2 https://github.com/hraban/go-onepassword https://github.com/hraban/go-onepassword

zie 9y ago

Agreed 100%.

aerotwelve 9y ago

Out of curiosity, do you use the CLI tool for feeding private keys and/or passwords into scripts, environment variables, or other software that you write? I had no idea they had a CLI implementation, and I've been looking for something that manages server/api keys as well as cloud service passwords. I imagine there's a better way to do this using enterprise key management software, but I no longer work for a place w/ this kind of budget.

zie 9y ago
I'm the parent comment, but yes, among other things. for enterprise key management, I recommend Hashicorp Vault (https://www.vaultproject.io/ https://www.vaultproject.io/) it's OSS so no giant budget required. There is a CLI available as a 3rd party app that works with newer 1P versions and talks to your local 1P vault: https://github.com/peacetara/slab/blob/master/src/python/README.md https://github.com/peacetara/slab/blob/master/src/python/REA...
nothrabannosir 9y ago
yes, notably 99designs’ aws-vault.[1] They only support keychain and plain file backends on OS X, and I’m trying to write a 1Password backend for it. Half of which will be in a separate lib.[2] Honestly the more I use it the less I understand how any company can allow employees to store AWS creds in a plain text file :/ lack of alternatives, I’m afraid. As is apparent from this thread :) 1 https://github.com/99designs/aws-vault https://github.com/99designs/aws-vault 2 https://github.com/hraban/go-onepassword https://github.com/hraban/go-onepassword