3 ms·

Why are people so vehemently opposed to the 1PW cloud sync service? For unenrypted data, I completely understand this. And in general, it's great to have the op

by rmorey 8y ago

Why are people so vehemently opposed to the 1PW cloud sync service? For unenrypted data, I completely understand this. And in general, it's great to have the option to sync using whatever service you want. But the data that 1PW stores is encrypted up the wazoo and AB couldn't extract your passwords from it even if they wanted to. In their security document they even outline how useless it would be for a bad actor to even steal every bit of data they have. And if some day their data center suddenly explodes and all that data is lost, your data is cached on all your devices anyway, and it's trivial to just export to another password manager. Am I mistaken?

nighthawk1 8y ago
I’d rather control the data myself. I view cloud hosted password providers as huge attack targets and they generally get hacked eventually (roboform, lastpass,etc). At least if you control where the data is stored your data can be kept off the radar so to speak.
- y_molodtsov 8y ago
  As far as I remember nobody really had any problems after the LastPass hack, since the data was encrypted anyway?
rcarmo 8y ago
Relying on a small, niche service to host something you rely upon daily is simply not a good long-term decision. I’d much rather rely on OneDrive or Dropbox for syncing, since the likelihood of their going away suddenly or being acquired by someone else who will tank the service is smaller. Not impossible, but more unlikely.
SpaethCo 8y ago
The key issue I have with the cloud service right now is it breaks the automated backup process I get with iCloud sync and their Mac client. My biggest concern isn't bad actor data theft or online service outages, it's silent corruption of data that takes weeks / months to surface. With iCloud sync of a local vault, the client will automatically store backup copies of the database on the local filesystem. I can sync that file to local ZFS NAS storage and to offsite storage to maintain months/years of archives as desired. Until there is an automated export/backup option with the Agilebits sync serivce, it's off the table for me.

by rmorey 8y ago

nighthawk1 8y ago

I’d rather control the data myself. I view cloud hosted password providers as huge attack targets and they generally get hacked eventually (roboform, lastpass,etc). At least if you control where the data is stored your data can be kept off the radar so to speak.

y_molodtsov 8y ago
As far as I remember nobody really had any problems after the LastPass hack, since the data was encrypted anyway?

rcarmo 8y ago

Relying on a small, niche service to host something you rely upon daily is simply not a good long-term decision. I’d much rather rely on OneDrive or Dropbox for syncing, since the likelihood of their going away suddenly or being acquired by someone else who will tank the service is smaller. Not impossible, but more unlikely.

SpaethCo 8y ago

The key issue I have with the cloud service right now is it breaks the automated backup process I get with iCloud sync and their Mac client. My biggest concern isn't bad actor data theft or online service outages, it's silent corruption of data that takes weeks / months to surface. With iCloud sync of a local vault, the client will automatically store backup copies of the database on the local filesystem. I can sync that file to local ZFS NAS storage and to offsite storage to maintain months/years of archives as desired. Until there is an automated export/backup option with the Agilebits sync serivce, it's off the table for me.