bitwarden

knightdave, Polish
@knightdave@mastodon.com.pl avatar

Każdemu komu rekomenduje założyć sejf w aplikacji od razu polecam kupić pendrivea za 20-30zł i robić szyfrowane kopie od czasu do czasu, a sam takich nie mam :D

Czas to zmienić! Kupiłem małego sandiska, utworzyłem szyfrowany kontener z pomoca i na niego zrzuciłem backup.

Teraz mogę spać spokojnie.

thomy2000,
@thomy2000@fosstodon.org avatar

Authenticator app! Finally an open-source alternative to . The app looks very nice and modern on Android. Can't wait for sync support.

https://github.com/bitwarden/authenticator-android
https://github.com/bitwarden/authenticator-ios

vascorsd,
@vascorsd@mastodon.social avatar

@thomy2000 not like there isn't aegis and others for the same 🙄

governa,
@governa@fosstodon.org avatar
adingbatponder,
@adingbatponder@fosstodon.org avatar

@governa looks like this

fabio,
@fabio@manganiello.social avatar

Just migrated from to .

Same API, same features, same UI, and support for other DBs than MSSQL.

One single stand-alone application vs. Bitwarden’s 10 Docker containers. 70MB of RAM vs. 2GB. 3MB of db storage vs. 300MB.

Why was a password manager supposed to take so many resources in the first place? Just because it runs on a Microsoft-only stack and on .NET’s inefficient VM? Just because somebody thought that it was a good idea to separate everything into different containers (even icons and 2fa are modeled as separate services in Bitwarden)?

It reminds me of my recent migration from Mastodon to Akkoma. I got more features, 5GB of RAM freed up and 300GB of storage freed up almost overnight.

Writing and running inefficient software that pointlessly consumes all the resources available on a machine should be a crime in a world with limited resources.

It makes me think of how much shitty bloated software like @bitwarden, probably based on awfully inefficient languages and frameworks like Java, Ruby on Rails and .NET, is running out there, pointlessly sucking up resources for doing simple jobs that could easily be done with 99% less resources.

Today’s developers, spoiled by IDEs, powerful machines, docker-compose and shortsighted “just throw more RAM at the problem” approaches, have forgotten how to write efficient software. Time for them to learn how to write good efficient software again. Software doesn’t eat the world. Only shitty software built on shitty framework does.

davidculley,
@davidculley@sigmoid.social avatar

@fabio I’m curious to learn your view on why Ruby on Rails is bad. (Sorry to distract from Bitwarden, the original issue.)

Is the design already bad? Or is the design fine, just the implementation is suboptimal?

I’ve never written Ruby code and am just wondering because DHH is always so proud of what he built.

fabio,
@fabio@manganiello.social avatar

@davidculley my experience with Ruby on Rails application mostly involves running both Mastodon and Gitlab on my servers.

In both the cases, what I’ve noticed is that it’s not the language itself that is slow and heavy (Ruby’s weight is comparable to that of e.g. Python), but Sidekiq.

Sidekiq is the standard framework used by Ruby on Rails application to schedule and run asynchronous jobs (processes, threads…), kind of akin to what php-fpm does for PHP.

In my experience, it’s hard to configure properly, and when not configured properly it ends up with endless pools of active jobs doing all kind of things and sucking up all resources you give to them.

chfkch,
@chfkch@ruhr.social avatar

Making progress with . Slow, but steady.
Today i implemented a password input to unlock the / vault, so we can soon remove a part of the credentials.toml (which was just a workaround for faster testing) and make the app safer.
feels nicer the more i get to work with it.

Sadly my ARM CI did not work as nicely as the x86, so i can't package for my phone easily.

craftyguy,
@craftyguy@freeradical.zone avatar

@chfkch nice! I'd like to package this for

governa,
@governa@fosstodon.org avatar
motoridersd,
@motoridersd@pug.ninja avatar

Installed . Will have to tinker with this later to see if it's worth moving my vault to a self-hosted instance instead of directly with

https://github.com/dani-garcia/vaultwarden

mez,
@mez@mastodon.nz avatar

@motoridersd I made the switch a few months back. Bitwarden’s apps/extensions aren’t as polished as 1pass, but I’ve had 0 issues with Vaultwarden. Happy with the switch, especially with 1pass’s change to subscription hosted only model.

Edent,
@Edent@mastodon.social avatar

🆕 blog! “HOWTO: Sort BitWarden Passwords by Date”

I highly recommend BitWarden as a password manager. It is free, open source, and has a great range of apps and APIs. The one thing it doesn't have is a way to sort your accounts by creation date. I now have over a thousand accounts that I've added - so I wanted to prune away […]

👀 Read more: https://shkspr.mobi/blog/2024/02/howto-sort-bitwarden-passwords-by-date/

owenblacker,
@owenblacker@dataare.cool avatar

@Edent Did I break my comment? I meant to add:

<blockquote>Delete the file as soon as you are done with it.</blockquote>

I would suggest using &lt;code&gt;&lt;a href="[https://en.wikipedia.org/wiki/shred_(Unix)](https://en.wikipedia.org/wiki/shred_(Unix))"&gt;shred&lt;/a&gt; -un 9 filename.json&lt;/code&gt; if you're on a Mac or another Unix-like system. &lt;a href="<https://gitforwindows.org/>"&gt;Git Bash&lt;/a&gt; also comes with &lt;code&gt;shred&lt;/code&gt; for Windows users.  

but I think I screwed it up…

Edent,
@Edent@mastodon.social avatar

@owenblacker
If you put an <a> inside the code block, it won't be linkable. I'll fix it later. Thanks for the comment 😃

Edent,
@Edent@mastodon.social avatar

Just checked my - I have over 1,000 passwords stored in there 😱

Should I go through and delete the ones I never use?
Or should I just ignore the obsolete ones?

mattcen, (edited )
@mattcen@aus.social avatar

@Edent I have a similar quandary; just over 750 passwords. I think that someday it might be worth auditing them and deleting the ones for websites that no longer exist, and deleting the unused accounts from websites that do still exist, but it is a lot of work to commit to all at once. Probably one of those things that makes sense to put 10 minutes aside for here and there.

aimaz,
@aimaz@mstdn.social avatar

@Edent there are some examples in the thread you linked that use the bitwarden cli and jq to do it. It saves having to write the unencrypted file to disk and if you filter the output fields you can avoid showing the passwords on screen too. So I’ll use something like

bw list items | jq 'sort_by(.revisionDate) | reverse | .[-10:] | [.[] | {name, revisionDate}]'

They seemed to suggest it would be in the web interface last year, but I see no evidence of the feature in any client I use.

NeadReport,
@NeadReport@vivaldi.net avatar

So the reason I am moving away from my beloved password manager is because of Proton Pass. Which happens to work well with Proton Mail, Proton Calendar and Proton Drive. You see, it's a suite of non-Google apps that is focused on privacy and encryption (you can use Proton Pass separately and for FREE)
And yes, it's a tedious process of moving to a better product. One that is focused on protecting vs. exploiting. I'm being patient and moving forward.

NeadReport,
@NeadReport@vivaldi.net avatar

I should mention that if you are using any reputable PW manager, GOOD ON YOU. (And if it happens to be Bitwarden, props!)
Let me know what works for you and why.

devol, Italian
@devol@mastodon.uno avatar

Come già annunciato da diversi mesi i servizi per la gestione delle password ed per la sono migrati alle 24 del 24/1/24 e sono ora disponibili qua:

:bitwarden: https://vaultwarden.devol.it
è sostanzialmente lo stesso software open source compatibile al 100% con bitwarden, il progetto è stato rinominato dallo sviluppatore.

🗒️ https://etherpadmypads.devol.it
ora usiamo il nome completo del progetto e gira su un server più stabile.

onthefencedev,
@onthefencedev@twit.social avatar

As a developer the biggest irritation I have with is that it doesn't take ports into account when displaying suggested logins; so logins saved for localhost:1234 will also be displayed for localhost:9876.

I mentioned it on the birdsite a while ago and they responded saying such a feature would be useful but it never materialised.

Thinking about moving to but initial testing shows the same limitation - unless there is a setting somewhere.

Seems like an obvious use case.

onthefencedev,
@onthefencedev@twit.social avatar

@Sandrew - I was looking in the options displayed in the browser extension and couldn't see anything. Found it now in the main portal and using 'starts with' resolves my initial use case but will also look at the other options as there are other scenarios I want to use if possible.

Certainly looks like I'll be migrating over at some point in the near future.

onthefencedev,
@onthefencedev@twit.social avatar

@daniel - reading through the post you linked to it looks like 'host' will be better than 'starts with' for my needs.

Thanks again for the info 🙏

amadeus,
@amadeus@mstdn.social avatar

1/2 I currently use a very good but still somewhat limited (also in terms of performance) shared service from Switzerland. I , and others. In the future I'd like to self host , , and as well.

graves501,
@graves501@fosstodon.org avatar

@amadeus

Somewhat related: I also have a self-hosted instance which also takes care of CalDAV/CardDAV... So you might not even need 🤔

amadeus,
@amadeus@mstdn.social avatar

@graves501 I have been using Baikal for a couple of years and just recently installed Nextcloud. ATM Nextcloud runs quite slow on my shared hosting. But once that's fixed, I'll probably migrate everything to Nextcloud. 😊

ButterflyOfFire,
@ButterflyOfFire@mstdn.fr avatar

OK, seems that @bitwarden for Android is supporting in fact arabic in its UI but the language is missing on the language picker.

Seems that I tooted about this in the past.

ButterflyOfFire,
@ButterflyOfFire@mstdn.fr avatar

Translation is 100%, not reviewed yet.

bitwarden, (edited )
@bitwarden@fosstodon.org avatar

@ButterflyOfFire Hi Butterfly! Thanks for reporting - I will check in with the team on this one. 👍

mjgardner,
@mjgardner@social.sdf.org avatar

I am so glad I moved from #Authy to #Bitwarden a year or so ago, precisely because of declining #desktop support. Now the decline has an death date: August 2024. https://www.bleepingcomputer.com/news/security/twilio-will-ditch-its-authy-desktop-2fa-app-in-august-goes-mobile-only/

#2FA #InfoSec #CyberSecurity #security

mjgardner,
@mjgardner@social.sdf.org avatar

@thibaultmol I linked to a specific highlighted passage that addresses your concerns. If you want to argue about it, take it up with @bitwarden.

nikunjkumarnakum,

@mjgardner @ente is here on all major mobile and desktop platforms its foss. has e2e cross device sync and much more great feature compared to authy. https://github.com/ente-io/auth/releases

  • All
  • Subscribed
  • Moderated
  • Favorites
  • bitwarden
  • tacticalgear
  • DreamBathrooms
  • cisconetworking
  • magazineikmin
  • InstantRegret
  • Durango
  • thenastyranch
  • Youngstown
  • rosin
  • slotface
  • mdbf
  • khanakhh
  • kavyap
  • everett
  • megavids
  • modclub
  • Leos
  • cubers
  • ngwrru68w68
  • ethstaker
  • osvaldo12
  • GTA5RPClips
  • anitta
  • provamag3
  • normalnudes
  • tester
  • JUstTest
  • lostlight
  • All magazines