Hacker News Reader

Comment by spike021 | Hacker News Reader

I started using Keychain pretty much primarily this year (other than 1Password at work) and it works pretty seamlessly for me (granted Apple devices only). Even the Chrome extension works quickly as if it were a native part of Chrome.

Glad they're splitting it out of System Settings into a dedicated app.

I've also started migrating family members to it. It'll be way easier for the less technical people since it's already tightly integrated in the devices and OS they use everyday.

View on HN

FireFox doesn't work with KeyChain, at least, not the last time I checked (which was a few years ago, admittedly). There's an extension that goes one way (read only), but that's of course relying on an unknown entity.

Does the Chrome extension still require you to enter a six digit code every day to even use it? When I tried it this was incredibly annoying and I switched back to 1password shortly after.

It’s important, otherwise that means any locally-running binary (maven, npm) can steal all of your passwords, since they are in clear on your computer.

Does macOS sandbox things like maven or npm? Do they need read access for everything the user can see?

MacOS asks when “Terminal” wants to access the Downloads or Documents or the Contacts, etc.

However it asks once, across all Terminal programs, for the entire lifetime. So if you’ve ever used “find ~/Documents -…”, then Maven can access it too.

My opinion about this is that we’ll progressively go towards a Dockerization of the builds, which is the only one that gives developers confidence about the sandboxing.

It should be required by SOC2/PII certifications, though. As in, I already think I’ve seen an insurance ask something like “Are accounting documents present on a machine where compilation is executed” or maybe it was “Is it possible to install new programs on machines where sensitive documents are managed?”

Not sure that it's every day but I haven't been too bothered by it. It's not unlike the security policies where I work. So needing to type in a OTP isn't out of my normal routine.

I often was looking to see "do I have that in keychain" and ... I'd forget where to find it as it wasn't a dedicated app.

You’re both talking about iOS, right? Because on the Mac it’s always been a dedicated app.

Yes, I am for sure thinking of iOS.

Yeah. But even for Mac it's always been more of a technical utility app. When I say that it feels more akin to Disk Utility than the Notes app (in terms of who it's meant for).

These days it even shows you a popup that asks something along the lines of "are you sure you want this app and not the iCloud Keychain tab in System Preferences".

Reply on news.ycombinator.com