Hacker News new | ask | show | jobs
by velomash 2328 days ago
IMHO paying for password storage solutions is the best way to get security. A robust solution will need updates, fixes, and improvements. The team building those will be paid somehow. Paying customers assure that ad networks and other nefarious actors cannot incentivize weak security practices.

Sure. We could all evangelize some esoteric command line FOSS system, but the general public NEEDS secure password management

1 comments

What "security" could you possibly get from password storage with subscription and automatic updates that you can ignore the risks involved?

You are giving a centralized 3rd party identifying information about you because of the subscription, control over your passwords because of the updates and you have to believe and trust it's never going to deny you access even without payment, issue an update to steal those passwords or be hacked by someone who does the same or hacks you through it. Oh, and they can do all the surveillance capitalism business models since they have access to the websites you visit.

The same security a bank gives you with a vault with guards.

Sure, you could put the money in your safe at home, but security always has tradeoffs.

Banks have an absurd number of regulations, and for good reason. Are you suggesting password managers should be regulated similarly. I'm sure that "small" fee would increase very quickly