1Password migrants thread

[maflynn]

Both. When you a have a corporation with a team of paid professionals is different from 3 guys trying their best. something might slip by. Its not a rule, but a general guide line.

Not for nothing, I would say larger companies will often have more issues with security due to larger teams.

Do you feel the same way for small FOSS projects? Do you actively suggest people to avoid those and use commercial products in its place that were produced by large companies like MS, Google, etc?

 

[Mr. Heckles]

this is why i do not trust any small time development with security. Better stick with something like bitwarden

Wasn’t Barracuda and SolarWinds hacked a few years ago? Both big companies.

 

[maflynn]

Wasn’t Barracuda and SolarWinds hacked a few years ago? Both big companies.

Let us not forget last pass which was one of the largest password managers if not the largest

There’s also all of those zero day vulnerabilities that Microsoft deals with. Their sharepoint was just under attack with hackers using a vulnerability

 

[Apple_Robert]

1) No matter what app is used, there are going to be risks. Suggesting a larger company is more secure or less vulnerable is naive at best. Conversely, saying a small company can't provide as good a service and focus is also naive.

2) The perfect app doesn't exist so, stop looking for it.

3) Use what works best with your personal workflow regardless of what others use.

4) Although subscription software is not my preference, there is nothing inherently wrong with using an app founded on such, versus a lifetime license which is usually defined as 5 years in the EULA. A company can be bought out or go under at any time. It is a gamble either way.

5) I think some in the thread look to find fault in every app or situation mentioned while trying to find positions based on nothing more than fallacy.

6) As quickly as tech and threat levels change, what worked last month or last year may or may not be the best to use in the present. Make informed decisions based on the facts before you not hunches or what if based on nothing more than logical fallacy.

7) Open source doesn't mean the software is inherently more secure or less vulnerable.

8) Never rely on any app or company to keep your personal data safe and accessible to you at all times. That responsibility belongs to the end user. Always have a backup contingency.

9) If someone uses an app or website service you don't like or agree with, that doesn't make said person wrong. Our duty as fellow members is to point out any known problems we may know of based on facts, share that information with others, and not get into circular arguments, which serve no real purpose.

 

[MacBH928]

Avatar notwithstanding.

It's a good example, though. Firefox and Brave have far smaller headcounts than Chrome does, yet?

Security not privacy.

In case of Brave and FireFox, they have less headcount that Chrome but enough headcount to begin with. I'd trust Brave more than say Palemoon . with 40 active million users, its big enough for me. And Mozilla has employees in the hundreds.

 

[MacBH928]

Not for nothing, I would say larger companies will often have more issues with security due to larger teams.

Larger teams have dedicated professionals working on security. I'll guess more people are testing Bitwarden security than say something like Minimalist (no offense to author)

Do you feel the same way for small FOSS projects? Do you actively suggest people to avoid those and use commercial products in its place that were produced by large companies like MS, Google, etc?

when it comes to security(not privacy) yes. It kind of depends on the size of the project too. Are we talking a calculator app or cloud hosting suite like NextCloud? Another thing to put into consideration is the lifetime of the app. If one guy worked on an app for 15 years and its widely used with no one able to breach it, I guess its safe to use.

Wasn’t Barracuda and SolarWinds hacked a few years ago? Both big companies.

Let us not forget last pass which was one of the largest password managers if not the largest

There’s also all of those zero day vulnerabilities that Microsoft deals with. Their sharepoint was just under attack with hackers using a vulnerability

its not bullet proof but a safer approach. Think of it like keeping your money in the bank vs in a drawer at your home. The bank can still be robbed, but its a safer approach than your drawer.