this post was submitted on 20 Oct 2024

627 points (87.4% liked)

Technology

60070 readers

3841 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS

627

Concerns Raised Over Bitwarden Moving Further Away From Open-Source (www.phoronix.com)

submitted 2 months ago by AsudoxDev@programming.dev to c/technology@lemmy.world

203 comments fedilink hide all child comments

top 50 comments

sorted by: hot top controversial new old

[–] unskilled5117@feddit.org 213 points 2 months ago* (last edited 2 months ago) (3 children)

This is an important issue IMO that needs to be addressed and the official response by Bitwardens CTO fails to do so.

There is not even a reason provided why such a proprietary license is deemed necessary for the SDK. Furthermore this wasn’t proactively communicated but noticed by users. The locking of the Github Issue indicates that discussion isn’t desired and further communication is not to be expected.

It is a step in the wrong direction after having accepted Venture Capital funding, which already put Bitwardens opensource future in doubt for many users.

This is another step in the wrong direction for a company that proudly uses the opensource slogan.

[–] solsangraal@lemmy.zip 101 points 2 months ago (2 children)

nothing lasts forever without being enshittified

load more comments (2 replies)

[–] sunzu2@thebrainbin.org 64 points 2 months ago (2 children)

Welp, I guess another time to move here soon.

And I just fucking vouched for them to a friend recently 🤡

Didn't know about VC funding these parasites using their funding to turn everything into shite.

What's the current "best" alternative? Keepass?

[–] foggenbooty@lemmy.world 17 points 2 months ago (1 children)

I haven't jumped yet, but the Proton suite is looking more and more appealing. I've been eyeing them as a Gmail replacement, but I've been happy with my VPN and password management providers. As this reduces the bundle makes more sense.

[–] sunzu2@thebrainbin.org 29 points 2 months ago (2 children)

They have a solid value proposition but don't like putting all my eggs all in one basket both for security and monopoly reasons.

They seem to be gunning for one stop shop and I think they are doing decent shop but I just don't like the idea after what Google did to us.

Situation is a bit different but gonna need to tka the lessons and not let these corpos do this again.

load more comments (2 replies)

load more comments (1 replies)

[–] ShittyBeatlesFCPres@lemmy.world 129 points 2 months ago (12 children)

Oh, for fuck’s sake. Can we have a decent password manager that isn’t tied to a browser or company? I pay for Bitwarden. I’m not being cheap. But open source is more secure. We can look at the code ourselves if there’s a concern.

[–] Telodzrum@lemmy.world 68 points 2 months ago (1 children)

Keepass: Am I a joke to you?

[–] sigmaklimgrindset@sopuli.xyz 28 points 2 months ago (1 children)

Love Keepass. Love that I can sync it however I want. Love that there are multiple open source client options across several operating systems.

[–] saddlebag@lemmy.world 29 points 2 months ago (1 children)

Android syncthing announced they’re stopping development this year. Open source got fucked double today

[–] prosp3kt@lemmy.dbzer0.com 13 points 2 months ago

terrible day. There is a fork called syncthing-fork that is under current development. I hope both projects merge.

[–] wetsuiterest@lemmy.blahaj.zone 28 points 2 months ago (1 children)

Keepassxc? Vaultwarden?

[–] pmc@lemmy.blahaj.zone 18 points 2 months ago (9 children)

Isn't Vaultwarden used with non-free Bitwarden clients?

load more comments (9 replies)

load more comments (10 replies)

[–] cmrn@lemmy.world 111 points 2 months ago* (last edited 2 months ago) (8 children)

EDIT: The article has been updated and it was described as a “packaging bug” and not an intended change.

How many times do I need to pack up and move to the next “best option”

[–] JustARaccoon@lemmy.world 49 points 2 months ago

Sadly as many times as needed, complacency is how these companies get "loyal customers" who are willing to put up with bs

[–] cy_narrator@discuss.tchncs.de 24 points 2 months ago (3 children)

Just go to Keepass and its over

load more comments (3 replies)

load more comments (6 replies)

[–] Snowpix@lemmy.ca 91 points 2 months ago (2 children)

[–] john117@lemmy.jmsquared.net 22 points 2 months ago

oh thank god

load more comments (1 replies)

[–] ghostface@lemmy.world 86 points 2 months ago* (last edited 2 months ago) (3 children)

Vaultwarden updated link

Open source version of bitwarden written in rust.

Where is the foundation to support foss?!?

[–] r00ty@kbin.life 53 points 2 months ago (2 children)

If they're moving away from open source/more monetisation then they're going to do one of two things.

1: Make the client incompatible (e.g you'll need to get hold of and prevent updating of a current client).
2: DMCA the vaultwarden repo

If they're going all-in on a cash grab, they're not going to make it easy for you to get a free version.

[–] schizo@forum.uncomfortable.business 27 points 2 months ago (1 children)

Don't forget option 3: someone writes a vaultwarden client independent of the closed-source crap.

If you can write a server that fully supports the client via the documented API, then you know everything you'd need to do to make a client as well.

load more comments (1 replies)

[–] potustheplant@feddit.nl 16 points 2 months ago (2 children)

You can't "dmca" the fork that was created while it was still open source. They could only prevent it from getting future updates (directly from them).

load more comments (2 replies)

[–] hedgehog@ttrpg.network 26 points 2 months ago

You have your link formatted backwards. It should be Vaultwarden, with the link in the parentheses.

load more comments (1 replies)

[–] ayyy@sh.itjust.works 70 points 2 months ago* (last edited 2 months ago) (6 children)

600 upvotes and only 10 downvotes on literal fake news. I wish readers were less lazy, it’s very frustrating.

Edit: made my statement a bit less toxic. I was mad.

load more comments (6 replies)

[–] Boozilla@lemmy.world 61 points 2 months ago (10 children)

Goddammit. It's getting to the point I'm going to have to figure out how to write my own app for this.

load more comments (10 replies)

[–] NanoooK@sh.itjust.works 43 points 2 months ago (4 children)

Great, I've just started to use it last week 🤡

load more comments (4 replies)

[–] gwen@lemmy.dbzer0.com 42 points 2 months ago (7 children)

can we start reading the articles and not just the headlines??? it literally says it's a packaging bug

load more comments (7 replies)

[–] mli@lemm.ee 39 points 2 months ago

Update: Bitwarden posted to X this evening to reaffirm that it's a "packaging bug" and that "Bitwarden remains committed to the open source licensing model."

According to Bitwardens post here, this is a "packaging bug" and will be resolved.

[–] magnus@lemmy.ahall.se 36 points 2 months ago (4 children)

Daniel García, owner of the Vaultwarden repo, has recently taken employment for Bitwarden.

The plot thickens.

load more comments (4 replies)

[–] ocassionallyaduck@lemmy.world 29 points 2 months ago (8 children)

Keepass vault synced over syncthing.

I keep not regretting it.

[–] druidjaidan@lemmy.world 106 points 2 months ago (1 children)

This is incredible

Right next to each other lol

[–] Cris_Color@lemmy.world 13 points 2 months ago

Syncthing fork seems to still be under active development

[–] cyberwolfie@lemmy.ml 33 points 2 months ago (4 children)

Was going to be my solution as well, bjt Syncthing-Android just got discontinued.

[–] ocassionallyaduck@lemmy.world 16 points 2 months ago

F-Droid syncthing-fork is still actively developed and had a patch in the last few weeks.

So hopefully this isn't the end.

load more comments (3 replies)

load more comments (6 replies)

[–] telescopius@lemm.ee 23 points 2 months ago

This is disheartening.

[–] Suavevillain@lemmy.world 19 points 2 months ago (5 children)

Well this ain't good. I don't really feel like switching apps.

load more comments (5 replies)

[–] ArkyonVeil@lemmy.dbzer0.com 17 points 2 months ago (3 children)

I wonder~ I wonder~ I wonder whyyyy...

load more comments (3 replies)

[–] solsangraal@lemmy.zip 16 points 2 months ago (17 children)

so what's the best pw manager?

[–] winterayars@sh.itjust.works 77 points 2 months ago (8 children)

Honestly, it's Bitwarden right now. This move signals their intent to change that, though.

load more comments (8 replies)

[–] anamethatisnt@lemmy.world 31 points 2 months ago (2 children)

Vaultwarden is a nice self hosted bitwarden alternative
https://github.com/dani-garcia/vaultwarden

Some prefer using KeepassXC and sync the database between devices
https://www.ctrl.blog/entry/keepass-vs-bitwarden-server.html

[–] ilmagico@lemmy.world 23 points 2 months ago (5 children)

+1 For KeePassXC and the KeePass ecosystem. Yes, you need to sync the database yourself, but you can use any file sharing service you like, e.g. google drive, dropbox... or selfhost something like nextcloud (like I do), which for me is actually a point in its favor.

Based on this news, I think I made the right choice back then when I decided to go with KeePass.

load more comments (5 replies)

[–] winterayars@sh.itjust.works 22 points 2 months ago

Vaultwarden is Bitwarden--at least for now, this change may push them apart.

[–] oaklandnative@lemmy.world 24 points 2 months ago

Proton Pass is open source and the company that runs it recently reincorporated as a Swiss non-profit to ensure their privacy mission can't be bought out by venture capitalists etc.

https://www.reddit.com/r/ProtonPass/comments/153t85q/proton_pass_is_open_source_and_has_now_passed_an/?utm_source=share&utm_medium=mweb3x&utm_name=mweb3xcss&utm_term=1&utm_content=share_button

https://proton.me/blog/proton-non-profit-foundation

load more comments (14 replies)

load more comments