The inner circle so to speak

  • Hot Saucerman@lemmy.ml
    link
    fedilink
    English
    arrow-up
    34
    arrow-down
    1
    ·
    edit-2
    2 years ago

    The thing is, ownership of any of these can change at any time. Bitwarden, Mullvad, and Tutanota could be sold to very different owners.

    That is up to and including something like uBlock Origin, which only has one developer, and would suddenly be very different if that developer died and the project had to be forked.

    You can never trust that the person who takes on the reigns has the same ideals as the people running them now.

    Hell, Mullvad was abused to the point they removed access to Port Forwarding on their VPN service, which has led to many people needing to switch to crummier, shadier VPNs that still offer port forwarding access. That’s not Mullvad’s fault, but it is an example of them having to change their philosophy and what they offer because of abuse.

    Trust should only go so far, and loss of trust should be very easy. There’s not a good reason to keep “trusting” something when it has fundamentally changed from its initial ideals.

  • Qkall@lemmy.ml
    link
    fedilink
    arrow-up
    5
    ·
    2 years ago

    bruh, i can’t be the only one confused why state farm’s drive safe app was being touted…

  • Fazoo@lemmy.ml
    link
    fedilink
    arrow-up
    8
    arrow-down
    3
    ·
    2 years ago

    Why do you trust a Germany based secure email over something like Proton? At least Mullvad is Sweden based.

  • darcy@sh.itjust.works
    link
    fedilink
    arrow-up
    10
    arrow-down
    5
    ·
    2 years ago

    keepass > bitwarden

    vpn providers should be reviewed regularly

    email is inherintly insecure/non-private, self hosted is best

  • dzervas@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    8
    ·
    2 years ago

    just a side note for everyone out there that uses bitwarden: you can reset your password with just your email. that means the admin can see your passwords. The only 3 upstream password managers that don’t have that “feature” are 1Password, lastpass and keypass (not counting gpg-based script in bash n friends). Lastpass is obviously a mediocre solution (too many breaches), keypass isn’t for everyone (UX). 1Password is a very solid solution and it has public security audits

    I’ve got nothing with agilebits/1Password - i just use it after spending days researching (also I’m a former IT security engineer)

    • Waryle@jlai.lu
      link
      fedilink
      arrow-up
      8
      ·
      edit-2
      2 years ago

      It’s so out of context it’s almost untrue.

      Bitwarden can’t find or change your password, and their admins absolutely can’t see them either.

      You’re talking about the “admin password reset” feature offered to organizations (and which doesn’t concern lambdas users at all), which must be explicitly activated and which allows admins not to see our password, but to trigger a password reset with notification to the user.

      Once the password has been reset, all you have to do is change it, and nobody else has access to it.

      https://bitwarden.com/help/forgot-master-password/

      https://bitwarden.com/help/account-recovery/