5 ms·

1Password is amazing. Hopefully Apple doesn't even touch them, and they continue developing that CLI that's been hinted at and teased a few times.

ReidZB 8y ago
Isn't the CLI already released? See https://support.1password.com/command-line/ https://support.1password.com/command-line/ I haven't used it, so I'm not sure how feature-complete it is.
- chadlavi 8y ago
  Neat, TIL they have a CLI
- xur17 8y ago
  I tried to use it, but the syntax is way more complicated than it needs to be to retrieve a simple password. After 10 minutes of trying to figure it out I gave up and just used pass instead. If anyone knows how to use it to retrieve passwords / copy them to the clipboard, I'm curious because we use it at work. edit: It looks like it might be possible [0], but it requires a long command or a command alias. The lack of tab completion is kind of problematic though. [0] https://gist.github.com/justinline/e11ac0f08f267502b9e96362457d03c6 https://gist.github.com/justinline/e11ac0f08f267502b9e963624...
  - crymer11 8y ago
    op get item <name or UUID> | jq '.details.fields[] | select(.designation=="password").value' | sed 's/"//g' | pbcopy will put the password for <name or UUID> on your clipboard on a Mac. (I'd probably wrap everything before `| pbcopy` in a function so it's easier to call and use directly if you don't want to copy the value)
craftyguy 8y ago
1password is a proprietary walled garden. There are many like it, and they are all traps.
- wilsonnb2 8y ago
  It's not a trap, it's just convenient to use. I can export my data in a CSV format that can be imported in another password manager if I choose to do so in the future.
  - meroje 8y ago
    The format is also openly documented [1] so theoretically third party clients can emerge to consume that data. > We believe security shouldn't be proprietary. 1Password only uses standard, documented data formats and encryption methods, so you can import and export your most important information at any time. [1] https://1pw.ca/whitepaper https://1pw.ca/whitepaper
  - craftyguy 8y ago
    It's a trap because you have no way to audit the code, you have no idea what they are doing with your information, and some of us are unwilling to trust the word of a charismatic CEO.
    - Analemma_ 8y ago
      I have no way to audit the code of an open-source password manager either, because I'm not a security/encryption expert. So either way I have to trust in third-party auditors, and 1Password has been audited and found secure.
      - craftyguy 8y ago
        In that case, would you rather trust a crowd of people not affiliated with the company, or (best case) a handful of other companies paid by the company (with an almost certainly controlled press release)? I'd choose the former, but 1password and other proprietary solutions don't want you to choose that.
        Analemma_ 8y ago
        For encryption and security software, I'd rather trust experts. "The crowd" is useless no matter how big it is are if they don't understand the domain, hence why even FOSS can contain security howlers like Heartbleed or the Debian OpenSSL fiasco. Which is not to say that FOSS can't be secure, but getting back to my original point, since either way I have to trust experts, I might as well pick the product that wins on functionality and polish.

ReidZB 8y ago

Isn't the CLI already released? See https://support.1password.com/command-line/ https://support.1password.com/command-line/ I haven't used it, so I'm not sure how feature-complete it is.

chadlavi 8y ago
Neat, TIL they have a CLI
xur17 8y ago
I tried to use it, but the syntax is way more complicated than it needs to be to retrieve a simple password. After 10 minutes of trying to figure it out I gave up and just used pass instead. If anyone knows how to use it to retrieve passwords / copy them to the clipboard, I'm curious because we use it at work. edit: It looks like it might be possible [0], but it requires a long command or a command alias. The lack of tab completion is kind of problematic though. [0] https://gist.github.com/justinline/e11ac0f08f267502b9e96362457d03c6 https://gist.github.com/justinline/e11ac0f08f267502b9e963624...
- crymer11 8y ago
  op get item <name or UUID> | jq '.details.fields[] | select(.designation=="password").value' | sed 's/"//g' | pbcopy will put the password for <name or UUID> on your clipboard on a Mac. (I'd probably wrap everything before `| pbcopy` in a function so it's easier to call and use directly if you don't want to copy the value)

craftyguy 8y ago

1password is a proprietary walled garden. There are many like it, and they are all traps.

wilsonnb2 8y ago
It's not a trap, it's just convenient to use. I can export my data in a CSV format that can be imported in another password manager if I choose to do so in the future.
- meroje 8y ago
  The format is also openly documented [1] so theoretically third party clients can emerge to consume that data. > We believe security shouldn't be proprietary. 1Password only uses standard, documented data formats and encryption methods, so you can import and export your most important information at any time. [1] https://1pw.ca/whitepaper https://1pw.ca/whitepaper
- craftyguy 8y ago
  It's a trap because you have no way to audit the code, you have no idea what they are doing with your information, and some of us are unwilling to trust the word of a charismatic CEO.
  - Analemma_ 8y ago
    I have no way to audit the code of an open-source password manager either, because I'm not a security/encryption expert. So either way I have to trust in third-party auditors, and 1Password has been audited and found secure.
    - craftyguy 8y ago
      In that case, would you rather trust a crowd of people not affiliated with the company, or (best case) a handful of other companies paid by the company (with an almost certainly controlled press release)? I'd choose the former, but 1password and other proprietary solutions don't want you to choose that.
      - Analemma_ 8y ago
        For encryption and security software, I'd rather trust experts. "The crowd" is useless no matter how big it is are if they don't understand the domain, hence why even FOSS can contain security howlers like Heartbleed or the Debian OpenSSL fiasco. Which is not to say that FOSS can't be secure, but getting back to my original point, since either way I have to trust experts, I might as well pick the product that wins on functionality and polish.