• brawnybunkbedbuddy
    link
    English
    54
    edit-2
    1 year ago

    Say whatever you like but “a privacy-preserving telemetry” sounds to me like an oxymoron.

    Im using bitwarden for mobile devices filled with crucial credentials and my main vault is a full offline database in keepassxc

    • @[email protected]
      link
      fedilink
      English
      61 year ago

      main vault is a full offline database in keepassxc

      I’m curious what your config looks like for this. How do you keep your db offline but accessible? Is it a restricted docker container? How do you access it when you’re not at home or on multiple machines (like a laptop)?

      • ThesePaycheckAvenging
        link
        fedilink
        51 year ago

        Not OP but I have my KeePass file on a locally hosted Nextcloud instance. Synced to multiple computers and phone but the Nextcloud server is only accessible at home LAN.

        Passwords are the kind of data that don’t belong in the cloud, in my opinion. Those companies are too juicy targets.

        • aeternum
          link
          fedilink
          41 year ago

          I host vaultwarden, but it’s behind a tailscale network. Best of both worlds.

      • brawnybunkbedbuddy
        link
        English
        41 year ago

        Offline as its not being synchronized into the cloud anywhere; if I need it elsewhere I just copy it manually from main OS. I could use some solution but its not worth efforts to my needs. What I keep in bitwarden is enough for my mobile needs

          • brawnybunkbedbuddy
            link
            English
            21 year ago

            It feels easier that I can update my database with the needed apps credentials on two different phones and a tablet (android and ios) from desktop via bitwarden

    • @[email protected]
      link
      fedilink
      English
      6
      edit-2
      1 year ago

      Why don’t you use a sync tool to automatically sync your KeePass database when you’re home and just get rid of Bitwarden?

      Edit: Or just use Syncthing to always keep your database on all devices in sync. You wouldn’t even need to open ports.

      • AceFour
        link
        fedilink
        English
        2
        edit-2
        1 year ago

        I have gone back and forth on KeePassXC and Bitwarden. I usually do a yearly reset of all my passwords and that is when i do the switch. I’m fine with Bitwarden but permissions to make it easy on Android phone seems excessive. You guys are prompting me to reexamine.

        Anyone try self-hosting VaultWarden?

          • AceFour
            link
            fedilink
            English
            1
            edit-2
            1 year ago

            What do you do for backup if your host is toast?

            That is why I went back to KeepassXC because Bitwarden Authentication was down

            • @[email protected]
              link
              fedilink
              English
              21 year ago

              Then I get a new NAS (because I will need a new one anyway), make a new Vaultwarden server and restore my backup. The great thing about Bitwarden is that your vault gets stored locally on every device and you can export it. So in the worst case scenario you could do that and restore your stuff on a publicly hosted Vaultwarden instance or the official Bitwarden instance (if that’s an option for you).

    • AdverbNounNumber
      link
      fedilink
      41 year ago

      I like KeePass. It’s got a decent Android app that syncs with my computer (I keep the library and a keyfile in Google Drive). Getting the Drive plugin to work with the desktop app took a little bit of googling but once it was set up it’s maintenance-free.

    • aeternum
      link
      fedilink
      3
      edit-2
      1 year ago

      I use vaultwarden because I couldn’t get the premium bitwarden to load on my self hosted bitwarden server, but same thing really. I still pay for premium bitwarden. It’s worth it for such a great product.

  • @[email protected]
    link
    fedilink
    English
    131 year ago

    Keep calm folks, they’re just not profitable right now. Unlike some of the smaller players with a viable business model, they just need to remain profit-driven until those profits arrive.

    • @pory
      link
      English
      111 year ago

      So, the Spez excuse?

      • @[email protected]
        link
        fedilink
        English
        51 year ago

        By default one should assume everything I utter is sarcastic…except this sentence; this is real real.

        • @[email protected]
          link
          fedilink
          English
          21 year ago

          In that case, assuming I read you correctly, I have to disagree. Privacy and security companies cannot rely on advertising or telemetry to be profitable; doing so is counter and paradoxical to their standing as a security/privacy company.

          Bitwarden seems to be doing just fine. 1Password should be taking cues from them, not advertising revenue

  • Cambionn
    link
    fedilink
    English
    13
    edit-2
    1 year ago

    Small nuance:
    “Later this summer, you’ll see the option to participate in our telemetry system and help improve 1Password. You don’t need to take any action right now, and we won’t collect any usage data without your awareness and consent first. Participation will be optional for Individual and Family plan customers. And at this time, our telemetry system won’t be rolled out to any team or business using 1Password.”

    Aka, it’s an opt-in that you can simply not opt-in to and if you don’t nothing changes and then it won’t be used on you.

    • @pory
      link
      English
      101 year ago

      For now. This is step one of enshittification. Step 2 is enabling it for new accounts by default. Step 3 is removing the ability for new accounts to turn it off. Step 4 is defaulting it on for legacy users, and step 5 makes it mandatory for everyone that isn’t paying for something.

      • gk99
        link
        fedilink
        21 year ago

        As such, we’re better off just opting out of using 1Password.

    • @[email protected]
      link
      fedilink
      English
      51 year ago

      Says them, I guess. Feels kinda weird to me.

      And at this time, our telemetry system won’t be rolled out to any team or business using 1Password.

      Uhh, what? If it’s opt-in why does it matter if team or business doesn’t have this? Different standards? To go through such lengths to explain this telemetry stuff to convince people, “Oh, no worries, yo! It’s OPT-IN! Trust us!” feels very dirty to me.

      • Cambionn
        link
        fedilink
        English
        4
        edit-2
        1 year ago

        Business software has very different requirements. It’s much harder to implement stuff for them without breaking those requirements. Think compliances like (ISO) norms and laws regarding commercial businesses, contracts, or even the software being made to work and be administrated on a whole different scale. You can’t compare really…

        While I agree it could go worse from here into a downwards spiral of enshitification, all I meant was that the title is a bit misleading into the other direction; making it sound like they would force telemetry onto users. If they wouldn’t say shit about this option, no one would sign up, even if they wouldn’t mind it. And basically, they’re explaining how they tried to make it as anonymous as possible and that’s it’s opt-in, which would also be a way to go if you legitimatly want to get data for improvement only. If that’s truly what they want, time will tell.

        The moment it stops being optional I’m looking for a different password manager right away, I switched more complex and important things for similar reasons. But since my experience with them has been good, I’ll give them the benefit of the doubt for now.

      • vudu
        link
        fedilink
        31 year ago

        Because if I’m a CEO I can’t confirm that my other employees won’t opt in. Is the opt-in at an admin only level? Then you haven’t gained consent of the individual. So it’s a bit more complicated to roll out functionality to these classes of customers.

      • @LufyCZ
        link
        English
        11 year ago

        Maybe they just straight up don’t care about data from those users?

    • @[email protected]
      link
      fedilink
      English
      21 year ago

      Also the decision to exempt business and teams makes no business sense. Companies derive the lion’s share of their revenue from enterprise. If a company wants to optimize their product offering, you’d do so with your most desireable, profitable segment in mind. This just seems like a backwards decision.

      I think more probably, they’re dogfooding it on the consumer segment and then after they’ve worked out the “oops, we shouldn’t have collected that bit of data” errors, they’ll move to include enterprise. But I’d guess that consumers are the guinea pigs here.

  • Infiltrated_ad8271
    link
    fedilink
    61 year ago

    and we won’t collect any usage data without your awareness and consent first

    If it really requires explicit and informed consent, then that’s ok.

    • @[email protected]
      link
      fedilink
      51 year ago

      Nah. Its just a tried and true step of enshitification. Fingers crossed that bitwarden is already profitable so we still have a good cloud password manager…