HNHacker News
TopNewBestAskShowJobs

replete

591 karma · joined July 26, 2013

meet.hn/city/53.2795531,-4.6152195/Trearddur
submissionscomments
replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
I investigated the browser extension not working with LibreWolf, broke down the logs and it was definitely code signature verification check. LibreWolf is unsigned and that is why it didn't work. It stopped working with Chrome at some point for the same reason
replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
Some people simply don't want to put their passwords onto someone else's computer... I've had little problems with their software, but I don't want to pay a subscription for password hosting because I don't want password hosting
replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
Electron has its benefits for sure, there are some great apps out there. It really depends on the use-case and development team. If it could sandbox a system webview like on smartphones I'm sure the resource issue would be mitigated. Non native UIs these days are almost indistinguishable from native.
replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
Thanks for the info.

I just need browser integrations to work and for it to be open source, I was pretty surprised how well the autofill works on Android. No way am I putting my passwords on the cloud, that makes zero sense to me.

replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
The main reason I switched from 1password 7 is that at some point they removed the option to disable code signature checks, meaning they had to update 1Password whenever a browser vendor changed their signature. This effectively means that Firefox working with the old version is going to end at some point, they just happen to have kept the same signature or some time.

The other side of this, is that it will not work with LibreFox, which isn't signed. Frustratingly, they had the option to disable checks for years in 1Password and removed it.

KeePassXC is the way to go. Similar experience on android and desktop to 1Password (non-SaaS) local vault.

replete··on 1Password delisting forum posts critical of their new Electron based 1Password 8
Switched away from 1password recently after 10 years. Open-source KeepassXC almost as good. No regrets.

Every Electron app seems to want around 400MB RAM minimum. It's not practical for too many of your day-to-day essential applications to be greedy with resources, it all adds up and not everyone has 32GB of RAM.

I used Matrix chat client, Element, on Android - it's an electron app, guess what? It uses 500mb-1GB of RAM. KDE NeoChat Android used 50MB. Electron is simply not a good fit for everyone.

replete··on Effindice v0.3 | browser-based EFF Dice-Generated Passphrases crypto secure pRNG
Single page HTML page passphrase generator (based on the 2016 EFF wordlist) with a cryptographically secure pRNG implementation (Fortuna) for dice rolls and a randomized time delay on generation.

Wrote it last night as an excuse to play with javascript. Went through a few pRNGs, Fortuna seems best.

You can run the HTML file from the desktop, which is what I was looking for. A local passphrase generator that didn't talk to any servers that's easy to configure. Have a few feature ideas which I'll implement if there's any interest.

Feedback welcome

replete··on Ask HN: How did my LastPass master password get leaked?
There is a fairly big difference, you are decrypting a local file using a master password NOT stored on the internet. No data is going over the wire, no 'other peoples computers'.

Even if someone got your vault file, with a _very strong_ master password it's just not going to get brute forced any time soon. [1]

With an online-only solution you have no idea how they are storing your data. I think 1p local vault (only) with db sync with an extremely strong master pw is adequate, but indeed for most use cases, it could be better to simply one-way sync from your main computer to your mobile device with something like Resilio Sync and avoid Dropbox entirely.

I cannot bring myself to trust any online service with this kind of data. Nobody is getting my master password without hacking my machine, brain, or government backdoor. There is a lot of peace of mind to be had with a local system IMO.

[1] https://support.1password.com/pbkdf2/

replete··on Ask HN: How did my LastPass master password get leaked?
1Password allows you to use a local vault, encrypted with a master password, that can be synced across devices in multiple ways, for instance using Dropbox. There's no web logins going, no 'someone elses database' accessed over the web. I have used this solution for a number of years, and would _never_ go for a cloud option like lastpass, for important personal data.
replete··on Ask HN: How did my LastPass master password get leaked?
You trusted an online service to look after your passwords. Use something local, like 1password. I have no idea why anyone would use a hosted solution like LastPass. Of course something will happen?
replete··on Ask HN: Top Skills to Learn for 2022?
What is the best vegetable to eat for dinner?
replete··on Ask HN: What do you want for Christmas?
Purpose
replete··on 16-inch MacBook Pro
> I now need to daisy chain converters to use my PS/2 mouse on my MacBook Pro though, so that's a bit of a hassle.

Out of curiosity, what PS/2 mouse do you use?

replete··on Windows 11 could run on Linux
Kinda garbage article offering nothing. Is Windows NT kernel really so bad?
replete··on Building a Raspberry Pi 3B+ full keyboard handheld
Great start. That low resolution is challenging for desktop UI, but maybe great if you're a devop hacker. We need a real open source phone platform. I'm curious about IBMs new hardware ..
replete··on Building a Raspberry Pi 3B+ full keyboard handheld
Pi4 Amiga project YES. I'm in. Custom floppy driver required for authenticity.

Checkout the ARMiga Kickstarter project.

replete··on A small website mystery
Most CDNs strip Accept-Encoding headers
replete··on The 10x developer is not a myth (2013)
Lol
replete··on What CSS minifiers also leave behind
Don't mean to squash any enthusiasm, but these types of 1byte optimization savings don't really have real-world benefits due to over-the-wire compression like gzip and Brotli.

A more interesting problem to solve, I think, is that of optimising CSS rules for browser rendering.

replete··on Async JavaScript Generators
Did you read the article
replete··on Flex
This stuff looks AMAZING, but no code or binaries to try? :(
replete··on Show HN: Kite, copilot for programmers, available for Python
Looks awesome but there is no way in hell I'm uploading my code to your cloud. Instantly violates NDAs.
replete··on Modern software development is cancer
Calling out some obvious real world issues there, but also kinda shitting all over some good ideas and innovations that have improved things, like containers.

A better title would be "The Mother Of All Moans"

Zzzzz

replete··on Optane Memory – A bridge between DRAM and storage
So they've made a big fuss about something that: - We can't just buy right now - Doesn't do the thing we were excited about (use optane as DRAM)
replete··on Announcing .NET Core Tools 1.0
I'm done with endless refactoring of .NET Core updates.

The reality is they shipped RCs with 1.x version numbers.

I will be back to reassess after Core 2.0 gets a minor update.

Microsoft suck at versioning. Progress is great, but we feel tricked.

replete··on Nvidia GeForce GTX 1080 Ti
8K anything is almost pointless unless you have far above average eyesight, like 20:5.

4K is the real sweet spot for typical human vision.

replete··on Cerebro App – Open-source productivity booster with a brain
Yeah there are other similar apps.

But this one is written in Javascript, so that is something going for it. More accessible, millions of packages to drop in easily.

Nice job.

replete··on Firefox 57 as the first release where only WebExtensions will be supported
Power users*.

I guess we're gonna have a fork of Firefox. Pointless.

Would be better to just deprecate it by default and enable via a flag.

replete··on Firefox 57 as the first release where only WebExtensions will be supported
This is terrible!

One of Firefox great features are the add-ons that change the _browser_ experience itself.

I NEED TileTabs, ColorTabs, and a few others that would stop working after this change.

Yes, I understand the ideology of browsers being invisible to the content, but what about our users? I don't think people understand that these add-ons are really productivity tools that aren't otherwise available.

replete··on Why do you use Firefox?
Because Firefox Add-ons allow more browser-enhancement than Chrome.

An example - TileTabs. Not only can you show any number of tabs in a grid like layout one one screen (so helpful for work), but it can compress them all into just one tab.

Chrome's extensions are allowed an icon in one of two places.

← PreviousPage 10 of 11Next →