Hacker News Reader

Comment by seclorum | Hacker News Reader

Store my keychain on the iCloud, eh? Is this going to be the default behaviour now?

If so, I guess I'm abandoning Apple faster than I thought I would, a day or so ago .

Lots of people are already doing this with 1Password either in iCloud or on Dropbox. As long as it's encrypted with the appropriate algorithms, what's the issue?

Yes or https://lastpass.com/ encrypted and free. Works wonders.

*free for desktop use; you do need to pay to use it on mobile.

Don't let the door hit you on your way out.

I mean, you could tell us WHY you think it's a bad idea.

Informing us of that you'll leave OS X? We could not care less.

Because I'm the kind of guy who doesn't want to share his keychain if its not necessary, is why. Its not necessary unless I reason to share a keychain .. and .. having this choice being taken away from me would be a suitable reason to abandon the platform.

They have 'suggested passwords' feature. It sounds a lot like 1Password, but is there going to be a PC client or web client to access those passwords?

I wouldn't dare use it if I was on another machine I hope (I have a mix) and not have access to my passwords. If it's Mac-only, that's going to be a problem.

I'm not a Mac user, but isn't the keychain encrypted?

Yes, the keychain is encrypted with your OS X user login password and only unlocked on login. I imagine this will still be the case as Apple mentioned AES256 encryption on their iCloud Keychain slide, though they could change it to use your Apple ID password if they plan on having mobile device support.

So let's see... in Firefox I have FIVE apple logins saved, because they can't decide on which url to use:

* appleid.apple.com

* daw.apple.com

* id.apple.com

* secure1.store.apple.com

* secure2.store.apple.com

If they have trouble getting something as simple as that right, I'd like them to stay away from my keychain.

That seems like a fault of Firefox that it can't wildcard password storage. That situation works in 1Password.

I don't think Firefox saves logins in the OS X keychain, and mapping which credentials go with which urls is something that Firefox is responsible for, not Apple.

Apple doesn't have a consistent single login url. Firefox isn't to blame for that.

> Yes, the keychain is encrypted with your OS X user login password and only unlocked on login

The "login" keychain is encry..... (the rest of your sentence).

You can have many more keychains, and they can have far more sophisticated passphrases. I have an "Internet Identities" keychain (for iCloud, Gmail, Dropbox, VPSs, Github, ...) that has a very long passphrase and is not unlocked at the login, nor it stays open after you enter the password (so, if Safari asks for the password and I enter it, the keychain doesn't just stay "open" for all apps to feast upon).

Yes, 256 bit AES.

It's unknown how many of those bits the NSA knows already.

This is just them doing a 1Password.

And with 1Password being "broken" for some versions this spring, I'm not entirely bothered by this latest sherlocking.

Reply on news.ycombinator.com