Open Source

31218 readers

232 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

537

Bitwarden Desktop version 2024.10.0 is no longer free software (github.com)

submitted 3 weeks ago by [email protected] to c/[email protected]

127 comments fedilink hide all child comments

Pull request #10974 introduces the @bitwarden/sdk-internal dependency which is needed to build the desktop client. The dependency contains a licence statement which contains the following clause:

You may not use this SDK to develop applications for use with software other than Bitwarden (including non-compatible implementations of Bitwarden) or to develop another SDK.

This violates freedom 0.

It is not possible to build desktop-v2024.10.0 (or, likely, current master) without removing this dependency.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 3 weeks ago (3 children)

How does this play with mobile?

[–] [email protected] 5 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

as another option this KeePassXC(PC)+radicale+DAVx5 The same for KeepassDX

[–] [email protected] 2 points 3 weeks ago (1 children)

Radicale+DavX5 is for calendars and contacts, no? How does this work for passwords

[–] [email protected] 2 points 3 weeks ago

for passwords no way, as you noted it is for calendars and contacts

[–] [email protected] 3 points 3 weeks ago (1 children)

There's an Android app, but it's not being developed any more https://github.com/android-password-store/Android-Password-Store

There's an iOS app as well https://mssun.github.io/passforios/

They have a list with all the clients and other tools on their website
https://www.passwordstore.org/#other

[–] [email protected] 3 points 3 weeks ago

besides everything else, the end of support for syncthing-android, yes, that's a real blow to the gut.

[–] [email protected] 2 points 3 weeks ago* (last edited 3 weeks ago)

Integration with Android

The GnuPG implementation for Android is called OpenKeychain. To configure it, just go to the "key management" menu and import the previously created secret key. The only drawback of OpenKeychain for me personally is that there is no fingerprint unlocking.

The pass implementation for Android is called android-password-store, or simply APS.

Install and launch APS. Before synchronizing the password store, go to the "Settings" menu. There we will need the following items:

Git server settings. The resulting URL should be the same as that specified on the repository page on github. Authorization type - OpenKeychain.
Git utils. In this section, specify the username and email from the gpg key.
OpenPGP provider. Select OpenKeychain.
Autofill.

Now you can clone. Select "clone from server" on the main screen, specify the desired location of the repository, check the git settings.

Of course, pass is not that easy to set up. However, this price buys confidence that the tools we use will not one day be declared obsolete, will not change their data format, and will not be left without support.