Elektrine
Log in Register

#1password

30 posts · Last used Sep 24

Jonathan Kamens 86 47 @jik@federate.social
· 1mo ago
Today’s new, ridiculous #1Password bug which should never have gotten past QA and released (actually a series of interwoven bugs)… Background: I am on macOS. I have two 1Password accounts accessible through the app and browser extension, my work account which is authenticated through our SSO IdP and my personal account which is authenticated with a password. #infosec #PasswordManagers 1/12
0
3
2
0
:mastodon: decio @decio@infosec.exchange
· 1mo ago
🎣 #Phishing du jour : faux portail #1Password Campagne plutôt soignée aujourd’hui : le lien passe par un tracking Mailjet, puis un redirecteur qui peut renvoyer les scanners vers le site légitime avant d’aboutir sur un faux portail 1Password. La page est personnalisée : l’adresse email de la cible est encodée dans l’URL puis préremplie automatiquement sur le formulaire. IOC observé : me[.]password1[.]org 👀 👇 https://scan.stalkphish.io/results/7cf90f69-4ca6-4fbf-9415-c3fc00ce5084 Chaîne observée Email de phishing ↓ mjt[.]lu tracking / redirection Mailjet ↓ secumail[.]redi-036602[.]com redirecteur / filtrage ↓ me[.]password1[.]org faux portail 1Password ↓ Email prérempli + Secret Key + Password Particularité : l’adresse de la victime est transportée dans l’URL sous la forme : email → Base64 → HEX → utm_source Email → mjt[.]lu → secumail[.]redi-036602[.]com → me[.]password1[.]org → faux login 1Password Victime identifiée via : email → Base64 → HEX → utm_source
Sensitive
Scan result - StalkPhish Scanner
scan.stalkphish.io

Scan result - StalkPhish Scanner

Automated phishing analysis: verdict, score, hosting, TLS and the full redirect chain.

0
0
0
0
MissConstrue @MissConstrue@mefi.social
· 1mo ago
Speaking of boycotts, #Omarchy is an open-source Linux distribution created by David Heinemeier Hansson (#DHH), the coder behind Ruby on Rails. DHH has also been infected by the billionaire virus that turns rich white guys into white supremacists. His comments have been pretty vile, some verging on exterminationism. DHH is a Nazi, and Omarchy is a vibe-coded Nazi bar. But he’s not alone in that Nazi bar. You want a list of people who’ve given millions to the cause of this Nazi? I got you. https://omarchy.org/patrons/ Boycott Nazi supporters: #1Password#37Signals #alibabaCloud#Block #Cloudflare #Coinbase #Dell #DigitalOcean #Dropbox #Meta #OpenClaw#OpenAI #Sesame #Shopify #Stripe #TapTap And many, many more.
Patrons - Omarchy
omarchy.org

Patrons - Omarchy

The people and companies funding the Omacom Foundation. Founding patrons contribute $1,000,000 to the mission; distinguished patrons, $100,000.

19
9
26
1
Ben Tasker @ben@mastodon.bentasker.co.uk
· 1mo ago
It's 2 weeks since I migrated from #1Password (https://mastodon.bentasker.co.uk/@ben/117225021599071981) and everything's going well. Today would have been renewal day, but instead it's click "Permanently Delete Family Account" Day
Quoting
Ben Tasker
@ben@mastodon.bentasker.co.uk
New #blog post: Migrating from #1Password to #VaultWarden The recent news about @1password@1password.social funding DHH hasn't sat well with me. By luck, my annual renewal was only a few weeks away too. So, I decided to change #passwordmanager This post talks about how to set Vaultwarden up as well as how to migrate credentials across (the process is the same for #bitwarden) https://www.bentasker.co.uk/posts/blog/general/migrating-from-1password-to-vaultwarden.html
Open quoted post
10
2
5
0
Fynn Ellie Becker @mvsde@mastodon.social
· 2mo ago
Replying to
1Password’s VP of Product ist fully onboard with DHH. So this wasn’t a fluke after all. Glad things have been set in motion so I can cancel my @1password@1password.social subscription soon. https://cloudisland.nz/@ehashman/117199216306854960 #1Password
cloudisland.nz

e. hashman 🇵🇸 (@ehashman@cloudisland.nz)

My eyes nearly strained rolling at the response that went out today from 1Password defending their donation to Omarchy. Particularly in the light of their VP of Product just tweeting this, while simultaneously acting like the donation had nothing to do with DHH: https://x.com/jmeller/status/2094132068342964671 They are feeling the heat enough to put out a coordinated statement. Keep up the pressure! I sent a very dissatisfied reply and continued to emphasize that if they do not withdraw the don

314
19
255
6
David Culley @davidculley@hachyderm.io
· 2mo ago

RE: https://infosec.exchange/@flyingpenguin/117212838196276138

I see a lot of timid responses to 1Password funding the Neo-Nazi DHH and his fascist collaborators:

"I threatened to cancel my 1Password subscription and will happily give them my money again when they come back to their senses."

Please, don't be so naive.

  • First of all, 1Password is largely owned by Shopify executives who are all friends of DHH. DHH is a director at Shopify.
  • Second, the VP of 1Password is using Nazi dogwhistles and also fully on DHH's side.

@flyingpenguin@infosec.exchange is a historian of (Nazi) German history. Read his article.

Friedrich Nietzsche had this idea of a "will to power". His Nazi sister turned that into Nazi propaganda after Friedrich's death.

DHH wrote a blog post containing "will to power" in its title.

It's no accident that the VP of 1Password used the words "force of will". It's a dogwhistle.

Don't be naive, folks.

Cancel 1Password, give them the finger, and tell them to go to hell. They are Neo-Nazis.

Don't tell them you'll return as a customer once they found their way again.

#1Password #DHH #fascism

Quoting
Davi Ottenheimer
@flyingpenguin@infosec.exchange
@ndevenish@mas.to @michel_slm@social.coop @mvsde@mastodon.social @1password@1password.social Here you go. https://www.flyingpenguin.com/dhh-nazism-funded-by-1password-vp-who-wrote-honest-security/
Open quoted post
169
15
152
6
Taffer 🇨🇦:godot::linux:🎃👻 @Taffer@mastodon.gamedev.place
· 1mo ago
Friends don't let friends use passkeys. They're not portable between "security devices". Say you're moving from @1password@1password.social to @bitwarden@fosstodon.org because 1Password supports fascists who want to ethnically cleanse Europe. Passkeys don't migrate, and going through all of your passwords, then logging into each site to delete the passkey is painful. A nice long random password, plus TOTP/OTP/"Authenticator" codes are best. #1Password #Drop1Password #Bitwarden #passkey #totp
18
11
13
0
Ben Tasker @ben@mastodon.bentasker.co.uk
· 2mo ago
New #blog post: Migrating from #1Password to #VaultWarden The recent news about @1password@1password.social funding DHH hasn't sat well with me. By luck, my annual renewal was only a few weeks away too. So, I decided to change #passwordmanager This post talks about how to set Vaultwarden up as well as how to migrate credentials across (the process is the same for #bitwarden)
Migrating From 1Password to Vaultwarden
bentasker.co.uk

Migrating From 1Password to Vaultwarden

This week has prompted me to migrate off 1Password. I decided that Vaultwarden would be a good new home for my credentials. This post talks about why and then describes getting everything migrated ove

51
8
34
2
Geoff Simmons @slimhazard@mastodon.world
· 2mo ago
1Password has gone fash and people are scrambling to replace it. Which makes me think it‘s time to challenge the wisdom of those fancy-pants password manager apps in the first place. Just use pass. Store passwords in GPG-encrypted files, and set up gpg to pop up a password dialogue. Password storage is structured using the filesystem — files in folders. History and offline archiving of the encrypted passwords are managed with git. Keep it unix-y and simple. #1Password
passwordstore.org

Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

0
0
0
0
Grow Your Own Services 🌱 @homegrown@social.growyourown.services
· 2mo ago
Boosted by @trending@homestead.social
If you're wanting to self-host a password manager you might want to check out Vaultwarden. It's a free open source alternative to 1Password, Bitwarden etc. It is compatible with Bitwarden clients but is a totally separate project. More info at: 🌱 https://github.com/dani-garcia/vaultwarden It's available to self-host through @yunohost@toot.aquilenet.fr at https://apps.yunohost.org/app/vaultwarden or by installing manually using the instructions at https://github.com/dani-garcia/vaultwarden#usage #SelfHosting #Vaultwarden #1Password #Bitwarden #Alternatives #FOSS
github.com

GitHub - dani-garcia/vaultwarden: Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs - dani-garcia/vaultwarden

36
14
34
1
Elena Rossini 🌈 @_elena@mastodon.social
· 2mo ago
Earlier this week I unsubscribed from #1Password and moved to #Bitwarden... due to their donation of 300k to DHH's #Omarchy. I made sure to let them know about the reason, so that hopefully the company would notice those kind of decisions have an impact. Day one I got messages from their AI system. But today I got a response by a real human at 1Password (or so it appears). If you are curious about the company's official response to the backlash, check out the screenshot (and/or #AltText)
298
70
203
4
Nathaniel Daught @nfd@social.lol
· 2mo ago

Bullshit! Entities should be held accountable for the words and actions of their founders / leaders.

  1. If an org truly doesn’t share the bigoted values of their founder then the org should very publicly separate itself from that individual by any means. Has Omacom done this with DHH???

  2. If the individual has direct ownership/control of the org and can’t be removed… Well then the argument that the founder is not the organization is complete bullshit.

See screenshot alt text for full email response from @1password@1password.social

#1Password

3
1
5
0
Nathaniel Daught @nfd@social.lol
· 2mo ago
Boosted by @kcarruthers@infosec.exchange
Replying to
https://www.brokentoys.org/your-racist-linux-distro-is-very-nice/ #1Password
Your Racist Linux Distro Is Very Nice
brokentoys.org

Your Racist Linux Distro Is Very Nice

sometimes, you know, you should be judged Today I found out my password manager betrayed me. No, not like that - it didn't leak my bank account login to the Uzbek mafia or anything nearly that dramatic. Instead, my password manager - which I've used and recommended for at least

4
0
10
0
e. hashman 🇵🇸 @ehashman@cloudisland.nz
· 2mo ago
Boosted by @trending@homestead.social
Alright folks, it looks like the #1Password execs aren't budging. Their co-founder is framing critics of DHH as calling him "evil," saying this is "unfair" and creating a chilling environment. This is a nonsense response to critique of a man who has called for ethnic cleansing. https://www.theverge.com/tech/988536/1password-dhh-linux-controversy It's time to #Drop1Password. Cancel your subscription and share a screenshot. Tell them why you're cancelling. You will not lose access to your service until your subscription expires, giving the 1Password team the opportunity to reverse their sponsorship and/or you time to migrate.
1Password wades into a right-wing mess after funding a Linux project
theverge.com

1Password wades into a right-wing mess after funding a Linux project

The controversy surrounds David Heinemeier Hansson, who has posted strident anti-vax and anti-immigrant views.

332
51
347
4