3 ms·
Lots of people I respect use Bitwarden, and it always seems to score really highly in these kinds of things. At the same time, the thought of having all my pass
by rcarr 3y ago
Lots of people I respect use Bitwarden, and it always seems to score really highly in these kinds of things. At the same time, the thought of having all my passwords protected by an open source program absolutely terrifies me. I know on some level this is irrational: closed source programs are hacked and cracked all the time, the programs themselves could be running on an open source operating system, closed source programs have had the most breaches (e.g LastPass). But I don’t know if I can get over it. I suppose the analogy is that I’m not sure I’d want to store a valuable physical item in a bank that openly posted it’s entire layout, vault, patrol details etc for all to see. Like yeah there’s something to be said for the wisdom of crowds and utilising that to make something secure, but surely it only takes one genius to come along who sees things differently, spots the flaw and exploits it? And the obfuscation of a closed source program feels like it’s an extra line of defence.
- unit2044 3y agoInteresting point of view. For me it is the other way around. I even selfhost bitwarden, just to keep control of my stuff.
- gochi 3y agoI wonder if more understood E2EE if that would help alleviate these fears.
- helpfulclippy 3y agoWhich is more trustworthy: - The bank that says "We have strong security measures," which it details for in full and you can audit to any depth you like and see they are in place, and you can see that security professionals have taken them up on their word and offered feedback which has been implemented - The bank that says "We have strong security measures," and then they say for security reasons they can't tell anyone about any of them and you have to take them at their word that they even exist