1Password joins the Rails Foundation: Strengthening the community, developers | Hacker News Reader

1Password joins the Rails Foundation: Strengthening the community, developers

blog.1password.com

35 pointsksec7 comments

I've been a long time 1P fan. The migration to electron has been an unmitigated disaster. Can't blame it all on electron, but the associated redesign has also been super annoying.

I am a happy 1password customer and don't use the native app at all (except on mobile). It works perfectly fine through browser extension and just using the website.

Using multiple vaults has been a true pain. 1Passwords is not the best of the SaaS password managers but rather the least worse.

They can FOAD. They took my money, one of the most expensive iOS apps I ever paid for. Around $40 I recall. I paid it because I thought it would be a good long term value.

Yeah I’m willing to pay for something useful that one person could write and hardly needs any maintenance.

They then promptly converted to a subscription model. They could have grandfathered their supporters at near zero cost. Instead they looked at us as a cash cow and went for the money grab for an app that does what… I wrote a replacement for personal use in an afternoon.

And since then they have pursued enterprise(?) I guess they’re not very good though because no company I’ve worked at uses them.

This is amazing for the Rails ecosystem! Rails has been slowly dying, or at least it felt like that. It was like "Punk is not dead" (which it totally is)...dying slowly. Then there were some controversial decisions made about the future of Rails: no build, moving away from TypeScript, etc.

These moves were controversial and risky, but seems like they paid off! And then DHH had a great keynote on the latest Rails World... https://www.youtube.com/watch?v=-cEn_83zRFw

We're back baby!

Can someone explain to me how it is that we accept password managers as viable solutions from a security perspective? Like, all it would take is a bad actor inside 1Password to upload a compromised version of the browser extension that transmits the unencrypted password vault to a server in Siberia. That would compromise a significant fraction of the world's passwords in a matter of hours.

How is that single point of failure not terrifying to anybody?

Unless we're going to run our own, we have to trust some party.

1Password IMO was a better choice than LastPass. Today I'm more inclined to use what the OS may provide (macOS) or the browser (Firefox).

Reply on news.ycombinator.com