this post was submitted on 20 Oct 2024

619 points (87.5% liked)

Technology

58810 readers

4749 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

619

Concerns Raised Over Bitwarden Moving Further Away From Open-Source (www.phoronix.com)

submitted 1 day ago by [email protected] to c/technology

193 comments fedilink hide all child comments

(page 3) 50 comments

sorted by: hot top controversial new old

[–] ocassionallyaduck 30 points 1 day ago (10 children)

Keepass vault synced over syncthing.

I keep not regretting it.

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago) (1 children)

I've always loved Keepass, however I moved away from it in 2012 as it and any file based vault has brute forcing issues. You need to track every copy of it that has been made and if any copy falls out of your hands, like if you lose a device, you need to do a password rotation on 100% of your passwords. Since its a file, its not possible to prevent brute forcing.

load more comments (1 replies)

load more comments (9 replies)

[–] Suavevillain 19 points 1 day ago (1 children)

Well this ain't good. I don't really feel like switching apps.

[–] [email protected] 12 points 1 day ago* (last edited 1 day ago) (2 children)

That's how they get you. Jump ship now

Anyone looking at this...what alternatives are out there?

[–] [email protected] 1 points 21 hours ago (2 children)

Update: Bitwarden posted to X this evening to reaffirm that it's a "packaging bug" and that "Bitwarden remains committed to the open source licensing model."

I'm not going to jump ship just yet, though I may get around to updating my backup.

There are plenty of alternatives, so feel free to shop around. But don't jump the gun just because of a random Phoronix article with an update that says basically the opposite of what the article claims. Wait some time to see if there are actual changes coming.

load more comments (2 replies)

load more comments (1 replies)

[–] [email protected] 23 points 1 day ago

This is disheartening.

[–] [email protected] 10 points 1 day ago

sigh

[–] [email protected] 16 points 1 day ago (25 children)

so what's the best pw manager?

[–] oaklandnative 24 points 1 day ago

Proton Pass is open source and the company that runs it recently reincorporated as a Swiss non-profit to ensure their privacy mission can't be bought out by venture capitalists etc.

https://www.reddit.com/r/ProtonPass/comments/153t85q/proton_pass_is_open_source_and_has_now_passed_an/?utm_source=share&utm_medium=mweb3x&utm_name=mweb3xcss&utm_term=1&utm_content=share_button

https://proton.me/blog/proton-non-profit-foundation

[–] anamethatisnt 31 points 1 day ago (2 children)

Vaultwarden is a nice self hosted bitwarden alternative
https://github.com/dani-garcia/vaultwarden

Some prefer using KeepassXC and sync the database between devices
https://www.ctrl.blog/entry/keepass-vs-bitwarden-server.html

[–] ilmagico 23 points 1 day ago (1 children)

+1 For KeePassXC and the KeePass ecosystem. Yes, you need to sync the database yourself, but you can use any file sharing service you like, e.g. google drive, dropbox... or selfhost something like nextcloud (like I do), which for me is actually a point in its favor.

Based on this news, I think I made the right choice back then when I decided to go with KeePass.

[–] [email protected] 7 points 1 day ago (4 children)

As someone who used to use KeePass, went to LastPass, and then Bitwarden (Vaultwarden), I finally got my non-tech literate wife to use Bitwarden. I’m concerned that KeePass might end up being more difficult if it comes down to it. I believe that KeePass had some sort of browser integration but it really has been a long time since I used it so who knows the current state. Curious how browser integration is today.