HNHacker News
TopNewBestAskShowJobs

xxkylexx

918 karma · joined October 10, 2016

submissionscomments
xxkylexx··on Many packages suddenly disappeared
https://status.npmjs.org/incidents/41zfb8qpvrdj
xxkylexx··on LastPass’ Authenticator app is not secure
Bitwarden supports autofill through accessibility services and through Oreo autofill.
xxkylexx··on Switching from 1Password to Bitwarden
They all removed the ability to export. Chrome is suppose to be adding it back in 63.
xxkylexx··on Switching from 1Password to Bitwarden
https://help.bitwarden.com/article/change-client-environment...
xxkylexx··on Switching from 1Password to Bitwarden
Bitwarden backend is cross platform and can run on Linux as well.
xxkylexx··on Firefox Quantum Lands in Beta, Developer Edition
Check your addons. They can really slow things down.
xxkylexx··on SQL Server 2017 for Linux (and Windows) goes live
Yea, looks like the article is just wrong. Thanks for clarifying Brent!
xxkylexx··on iPhone X
It's Apple's way of transitioning to a higher price point on their phones. Now they have the iPhone X at $1000 but oh, there's still have this iPhone 8 at the lower price point... I'm betting next year there is no more lower price point and the new standard is $1000 phones.
xxkylexx··on Why did we switch from Braintree to Stripe?
Nice. never knew about this.
xxkylexx··on Why did we switch from Braintree to Stripe?
> pro-rata pricing wasn’t a thing

That's not true. We use Braintree for almost the same per-seat model described in the article and we pro-rate changes to the subscription mid-cycle using Braintree's "pro-rate on upgrades/downgrades" options.

Ref docs: https://articles.braintreepayments.com/guides/recurring-bill...

xxkylexx··on Breaking into 1Password, KeePass, LastPass and Dashlane
I'm confused since the article never highlights any of the facts about the strength of the master password used to protect the vault. Of course a weak master password can easily be broken with an offline GPU accelerated attack.
xxkylexx··on Breaking into 1Password, KeePass, LastPass and Dashlane
No. This article describes an attack where the user has already gained access to the encrypted database, which assumes they have already subverted 2FA.
xxkylexx··on GitHub was down
Looks like I am still able to push to/pull from my repos without issue.
xxkylexx··on LastPass RCE vulnerability fixed
This is why we don't offer this feature. This feature is one of the major offenders for lastpass in the past. It's very easy to get wrong and expose vulnerabilities.
xxkylexx··on LastPass RCE vulnerability fixed
Everything you see today will remain free for personal users.
xxkylexx··on LastPass RCE vulnerability fixed
As we bring some of our revenue generating features online we hope to have the cash flow to fund regular third-party audits.
xxkylexx··on LastPass RCE vulnerability fixed
We have both of these things:

- Firefox: https://addons.mozilla.org/en-US/firefox/addon/bitwarden-pas...

- Generator: http://imgur.com/3q4w9Mn.png

xxkylexx··on LastPass RCE vulnerability fixed
bitwarden is currently sponsored by the Microsoft BizSpark program which covers many of our operation costs and allows us to offer services for free to our users. We are working to introduce enterprise features for businesses in the future (scheduled for release next month) which will allow us to monetize. In the meantime, everything is free for users.
xxkylexx··on LastPass RCE vulnerability fixed
There have not been any formal third-party audits done that we can document yet, however, the product is entirely open source (from the database, backend apis, to all client-side applications). https://github.com/bitwarden . Anyone is free to audit (and contribute) as much as they'd like. If you can get Travis (or any security researcher) interested in reviewing our products we would love to work with him.
xxkylexx··on LastPass RCE vulnerability fixed
- We released app-fill (autofill) on android last month. Make sure you are using version 1.3.0 or greater. Read more here: https://blog.bitwarden.com/android-v1-3-0-now-with-auto-fill...

- We also fixed the issue you are referring to on Firefox last week. Make sure you are using 1.10.1

- There are plans for additional "wallet" features in the future.

xxkylexx··on LastPass RCE vulnerability fixed
If you're interested in an open source option that compares quite well to the LastPass feature-set, check out bitwarden: https://bitwarden.com/ (note: I am the lead developer).
xxkylexx··on PSA: LastPass Does Not Encrypt Everything in Your Vault
Hi, I am the lead developer of bitwarden. bitwarden is currently sponsored by the Microsoft BizSpark program which covers many of our operation costs and allows us to offer services for free to our users. We are working to introduce enterprise features for businesses in the future which will allow us to monetize. For now though, everything is free for users.
xxkylexx··on PSA: LastPass Does Not Encrypt Everything in Your Vault
Hi there. I'm the lead developer of bitwarden. bitwarden is currently sponsored by the Microsoft BizSpark program which covers many of our operation costs and allows us to offer services for free to our users. We are working to introduce enterprise features for businesses in the future which will allow us to monetize. For now though, everything is free for users.
xxkylexx··on Connect 2016 [video]
Please keep updating
xxkylexx··on Ask HN: What simple tools or products are you most proud of making?
https://bitwarden.com - Free, open source password manager for iOS, Android, Chrome, Firefox, Opera, and the web.
xxkylexx··on Angular 1.x Banned from Firefox Addons
Angular and Firefox teams are working to resolve the issue. The issue is not related to sandbox ... see https://github.com/mozilla/addons-linter/issues/1000#issueco...
xxkylexx··on Angular 1.x Banned from Firefox Addons
Thanks. I updated the comment.
xxkylexx··on Angular 1.x Banned from Firefox Addons
Which is referring to the possibility that the application may not be using some feature that is affected by this supposed top secret vulnerability.
xxkylexx··on Angular 1.x Banned from Firefox Addons
No, the engineer is asking for more information so that he can determine if the application is truly affected by some unpublished Angular vulnerability or if Mozilla is just being too aggressive with their ban hammer because someone said "Angular 1.x was no longer being officially supported", which is false.
xxkylexx··on Bitwarden – Free and Open Source Password Manager
We have no affiliation with keeper. They are just sending you spam like they do for everyone. Just a coincidence.
← PreviousPage 2 of 3Next →