4 ms·

Very nice, but: 1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1passwor

by zellyn 12y ago

Very nice, but: 1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1password's integration with the browser is very helpful: since I've been using a linux box as my day-to-day machine (where 1password doesn't have a native version), I've been using it significantly less, because it adds friction. On Mac OS, I would just auto-gen a horrific 12-16 character random password for any website, and have it automatically saved to my 1password. As you might guess, I have high hopes for Mitro, especially if they (well, I guess it's now we) can create a compelling don't-use-their-host story (either hosted, or file-based (eg. dropbox)) and pass at least a cursory security smoke test. :-)

reedlaw 12y ago
I'd love to find a way to securely share passwords with mobile devices. But from what I understand, there's no very secure way to do it on Android. If you store a private key on the device then other applications may have access to it. And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. An ideal solution would allow selective sharing because there are some secrets you wouldn't want stored on your mobile device.
- 0xeeeeeeee 12y ago
  Applications are separated by Linux permissions on android. Attempting to read or write to other application directories simply won't work. Your fear is not correct for the average case user
- elithrar 12y ago
  > And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. iOS8 makes it possible (thankfully!): http://blog.agilebits.com/2014/07/30/introducing-the-1password-app-extension-for-ios-8-apps/ http://blog.agilebits.com/2014/07/30/introducing-the-1passwo... - although I'm not sure how it'll work if you store your keychain on Dropbox.
- TheCraiggers 12y ago
  >Android It depends on how you do it. If you use the local app storage, it's protected via the OS. Only the App itself can read/write from it. If you use "USB Storage" then the data is stored on the sd card or equivalent. Any other app with the USB Storage permission can read or write to that directory and it's very much not secured. As for interfacing with other apps to "autocomplete" your password, there are permissions and ways to do that too, although I can't speak for them since I've never done it.
k2enemy 12y ago
You're absolutely right -- my setup comes with a lot of limitations. They are ones that I'm happy living with, but when family and friends ask for advice on passwords I point them to 1Password. Hopefully Mitro will become my new recommendation!
- kraymer 12y ago
  That is limitations I could live with, I'm interested to give it a go. Could you post the scripts on pastie/github by any chance to spare me some dev time? or my mail is in my profile

by zellyn 12y ago

reedlaw 12y ago

I'd love to find a way to securely share passwords with mobile devices. But from what I understand, there's no very secure way to do it on Android. If you store a private key on the device then other applications may have access to it. And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. An ideal solution would allow selective sharing because there are some secrets you wouldn't want stored on your mobile device.

0xeeeeeeee 12y ago
Applications are separated by Linux permissions on android. Attempting to read or write to other application directories simply won't work. Your fear is not correct for the average case user
elithrar 12y ago
> And with iOS, each app is its own silo, so I'm not sure how you'd get password autocomplete working. iOS8 makes it possible (thankfully!): http://blog.agilebits.com/2014/07/30/introducing-the-1password-app-extension-for-ios-8-apps/ http://blog.agilebits.com/2014/07/30/introducing-the-1passwo... - although I'm not sure how it'll work if you store your keychain on Dropbox.
TheCraiggers 12y ago
>Android It depends on how you do it. If you use the local app storage, it's protected via the OS. Only the App itself can read/write from it. If you use "USB Storage" then the data is stored on the sd card or equivalent. Any other app with the USB Storage permission can read or write to that directory and it's very much not secured. As for interfacing with other apps to "autocomplete" your password, there are permissions and ways to do that too, although I can't speak for them since I've never done it.

k2enemy 12y ago

You're absolutely right -- my setup comes with a lot of limitations. They are ones that I'm happy living with, but when family and friends ask for advice on passwords I point them to 1Password. Hopefully Mitro will become my new recommendation!

kraymer 12y ago
That is limitations I could live with, I'm interested to give it a go. Could you post the scripts on pastie/github by any chance to spare me some dev time? or my mail is in my profile