6 ms·
An iCloud keychain? No thanks.
by waxjar 13y ago
An iCloud keychain? No thanks.
- mpyne 13y agoYes, announcing that right after PRISM is leaked may not be the best idea. :)
- drivebyacct2 13y agoThe last side basically says: "encrypted client side".
- mpyne 13y agoWell, HN has told me that the NSA is all-powerful, so I'll take that with a grain of cyber-salt. /s Edit: Non-sarcastically, but what about the metadata about the keys?
- wavefunction 13y agolike the position of the keys on the keyboard you pressed when you typed your password? it's meta-data ;)
- pajju 13y agoLastPass does this really well for all devices, works with any browser, even mobile too! This iCloud key chain must be Safari only! :)
- mitchty 13y agoJust wish I could use it more easily on ios. The lastpass app is OK, and the bookmarklet is meh.
- Someone 13y agoFireFox already interfaces with the normal KeyChain. Why must it be Safari only?
- namityadav 13y agoI thought they'll add KeyChain integration in iOS more deeply. Something like, "If you tap-hold on a password field in an iOS app, the OS will ask you if you want to paste the password from your KeyChain." That's where it becomes much more useful than LastPass.
- stock_toaster 13y agoIsn't the keychain encrypted client side though?
- chongli 13y agoHow do we know they aren't holding our private key in escrow?
- mitchty 13y agoHow about we hold off on leaping to conclusions before we see how it works?
- chongli 13y agoI'm not leaping to any conclusions. I think my question is totally fair. Is Apple providing the source code to this system so that we can audit it? Or do we just have to trust one of the companies implicated in the PRISM scandal?
- jfb 13y agoI will be interested in seeing how well this works, given what a pig's breakfast the old .Mac keychain syncing was.
- ceejayoz 13y agoThe average non-technical user is going to be far better off with that than the current state of "password1!" used on every site across the internet.
- jonknee 13y agoThe average non-technical user will now have "password1!" synced with iCloud.
- e1ven 13y agoIt automatically suggests new passwords based on Random strings when it sees a password box.
- jonknee 13y agoThe average user already has created most of the accounts she will create. Outside of HN not everyone is trying out new services everyday. I could also see many people being confused by a random password and think to themselves that they'll never remember it and then override to use their trusty [but] insecure password. It's also not cross platform so not a solution for many people. It's not Apple's fault, I'm sure it's a great password manager. The problem is passwords are broken. Managers are a good band aid, but fundamentally passwords are broken.
- 3rd3 13y agoWhat would a better solution look like?
- parasubvert 13y agoFunny, I thought "at last!" 1Password is fine, but I'd prefer a more integrated experience.
- waxjar 13y agoThe idea an sich is good. In light of last week's news however, I'll stick with 1Password.