1Password faced immediate backlash from customers this week over a $300,000 pledge in support of a Linux distro created by David Heinemeier Hansson, who has regularly published overtly racist blog posts that include comments calling for deportation of ethnic minorities in Europe. The popular password manager is now a “distinguished corporate patron” of Omacom, the nonprofit foundation that oversees a popular Linux distribution known as Omarchy.
Archive: https://archive.is/osNh3
When/how/why did DHH fall off so bad? There was a time when he was (at least vocally) shitting on Jeff Bezos, Chamath, and a few other “friends”
Probably around the time he started writing blog posts about how there’s too many brown people in London, or comparing Romani to invasive predator species?
Being against a few horrible people doesn’t automatically make you a good guy…
deleted by creator
They’re currently in the finding out phase.
Damnit. I just found out about Omarchy and was thinking about trying it out. Not anymore.
Cachyos will forever be the ideal Arch distro for nerds who want the benefits of Arch without the hassle of Arch (until they support some giant racist or soemthing)
Nonetheless, it seems the company has sacrificed a moral position for a “mission-driven” position. In the same message to staff, Faugno says “the scale and growth of [Omarchy’s] use among our customers is significant - Omarchy has grown to be the second most used Linux distribution among 1Password users."
I didn’t know Omarchy existed until, like, yesterday, so this is surprising. Do 1Password users just tend not to use Linux, so second place isn’t many users?
I feel like this has to be made up, downstream repack distros almost never show up on the top 10 usage stats. You will always see Ubuntu way ahead of Kubuntu.
Not to mention 1Password is a pretty popular enterprise app and I have yet to see some insane sysadmin actually roll with arch as their distro of choice. Most are probably on RHEL or some other enterprise derivative.
It’s probably not made up because 1Password is pre-installed and bound to a hotkey in Omarchy. Linux users making informed decisions about what to use for password management probably don’t pick 1Password most of the time due to its terrible security record.
Ah didn’t realize it came preinstalled lol.
spoiler
Prepackaged “superior” arch distro and the best they could come up with was 1Password? seriously lol?
1Password is the best they could come up with when “best” is measured in dollars contributed.
I said somewhere else that giving money to a distro won’t even have an ROI, but I didn’t know about this. If the distro is promoting their product that’s a whole other thing.
Terrible security record?
Of the items listed in your link, only the second one seems problematic, in that I wish they had discovered the (non-password but still privacy related) issues first. Even that section acknowledges all of the issues are fixed. The only section that makes it sound like there is still a problem is the last one, which states that version X still contains the vulnerabilities, but in reality that’s just how versions work. Patching a vulnerability creates a new version.
Is there ANY record of passwords being leaked from 1password because of their own lack of security??
That piece of information seems like key context. 1Password didn’t just give money simply because they like the product. More or less, it’s product placement in return for funding.
I’m on the fence if that’s better or worse.
lol what. 1Password literally has one of the best security records out there. They’re the ones actually inventing new more secure ways of doing things. The fact that those are all of the issues over the years and they’re one of the most popular pw managers on the planet is pretty indicative of how strong their security actually is. And they’ve never had a password breach, unlike lastpass.
They are nonfree.
Probably because Omarchy is preinstalling 1password.
Isn’t that a commercial product for which great open source alternatives exist? What kind of distro does that?
And don’t they also preinstall Basecamp, DHH’s own company’s product?
Maybe it’s all just a vehicle for product placement.
What kind of distro does that?
One that does not care at all about having maintaining a sane and open ecosystem. Where there’s money to make, they will prey down quickly. Now that people are somewhat convinced that Linux based systems can work and actually attract the general public, a whole new market is ripe for reaping.
I haven’t checked but I would guess that 1password comes pre-installed in Oligarchy and they’re counting every user that loads the client as a “user.”
I love the Oligarchy typo
The backlash to 1Password’s funding should have been predictable
Managers don’t know shit
The worst part is, giving money to a Linux distro isn’t likely to have any real return on investment, so why is it even worth a risk of backlash?
It preinstalls their app.
Indeed. Maybe nazi?
I’m so glad I switched to Bitwarden. Even without the whole extreme-right angle, the distro, that I’ve never heard of before today, seems like total slop.
Its not even a distro. Its arch with dotfiles. Literally.
No repos, no custom packages, etc. Just arch with sloppy dotfiles.
They have repos now, but nothing in them is too advanced, and they absolutely do not deserve the money. GNU/Linux Mint offers THREE great desktop experiences, which are not kitsch slop (even if you don’t like them, they’re very high-quality) and have a much smaller budget.
You can hate DHH, but that’s a straight up lie. They have repos, custom packages. They have an ISO installer, mirrors, even a custom kernel. If that’s not a distro then what is?
Yeah but Bitwarden is forkable
There is also Vaultwarden which is basically a drop in for Bitwarden
I must be confusing vaultwarden with another bitwarden compatible thing and thought this is the one I have to host a server myself.
Probably better that I do that tbh
that’s right, vaultwarden is the server. It’s not a bad idea to host it yourself, but this is kinda a critical service, and the clients are not too good in keeping the data accessible if the server goes down. so, choose wisely. there are also unofficial public bitwarden servers you can use. if that sounds better, choose one that hosts multiple services and has a community around it, those have a better chance of being kept alive.
My thought process is that I set up the server on my home computer as the main base, and have that occasionally sync to my other devices such as phone and laptop, and sync back to it if I do any changes in those. The remote devices should have local database because my main computer will not always be online.
How feasible is that and how easy is that to set up?
Or should I just set up keepass instead since IIRC that’s one of the ways it can be set up.
The remote devices should have local database because my main computer will not always be online.
yeah, about that. none of the official bitwarden clients allow editing if the server is not accessible. they didn’t want to have to deal with conflict resolution
Or should I just set up keepass instead since IIRC that’s one of the ways it can be set up.
sounds like a better idea. but synchronization wise, conflict resolution has to happen somewhere. like when you edit an entry on two devices, and later they try to sync both changes at once. Fortunately tye keepass format has a more comprehensive entry edit history than bitwarden, so clients can figure it out.
keepassxc on linux supports something called keeshare, check how is compatibility for that with your mobile keepass app. original keepass on windows supports some kind of automatic merging on saving and loading, maybe keepassxc does that too? if you end up using synthing, conflicts could occur at that layer, which is not hard but not so straightforward to handle, but keeshare is supposed to help with that I think.
now we need a fork/replacment for their shitty clients that have unreliable offline functionality and were on an EOL Electron for like 3 months, and for rbw which hasn’t been updated in ages and has compatibility issues with bitwarden.com now
There’s KeyGuard, but the license is simply “All rights reserved.” Source available, non foss?
Yeah no thanks
I hope someone makes a replacement rather than a fork, i reallly hate Electron, we need to hope for a fork of the browser extension too
(Before anyone says anything: yes i thought of making it myself but i don’t really have expirience in security stuff and fluff so i’d rather wait for someone expirienced to do it)
Why does Omarchy even need this money when it’s run by a billionaire?
This song have just been sent to Arch or some Linux foundations.
Because there are multiple Linux options, once the commercial versions flood in, the most marketed will grab the biggest share of the uninformed populace. So obviously the billionaires want to wrestle control over it.
Thankfully it looks so unserious that it will not capture anyone except ‘windows/mac power users’.
So the majority of people.
Why does this shit distro deserve all this funding and support? There’s many better options doing a lot more for the ecosystem yet this gets the attention. It’s don’t understand.
That’s the thing about real world. People don’t ask for permission to do things.
If you think you can do better, who’s stopping you?
It uses AI to fix issues and errors. And billionaires need people to use AI as much as possible.
But seriously what is the actual reason for the donation
Bundling of their stuff into the base installation, I suppose. With simple math, if 1password gets like 33k subscription payments, that’s about $100 000 already.
Omarchy got perhaps a 100K installations just last month.
They’re buying customers and visibility with a sum that’s probably pocket change for them.
Per @[email protected]’s comment
I think we all know why. Whether having money causes racism, or it just so happens that racists are the ones with the money and they’re good at keeping it “In The Family” so to speak is kind of tangential and academic. It’s the hateful bigots that have the cash to fund big things, so if you want funding, it pays to be trashy.
They aren’t just racist, They also hate the poors and basically anyone that isn’t them.
I agree, but I suggest you direct your replies directly to the source comment. I’m just the messenger here.
Billionaires like racists?
to fix issues and errors
and create more issues and errors, like executing USB device names as root.
it’s the circle of slop
Look! There’s a lion! Oh my god!
Nice reference bro!
I think it’s time to start a company that produces excellent mice named rm -rf / --no-preserve-root then
Very seldom is something funded that “deserves” it. The answer is that its’ creator (DHH) is very wealthy and connected.
I think we all know why. Whether having money causes racism, or it just so happens that racists are the ones with the money and they’re good at keeping it “In The Family” so to speak is kind of tangential and academic. It’s the hateful bigots that have the cash to fund big things, so if you want funding, it pays to be trashy.
This is what I think it is.
Maybe I should sell my dotfiles? 🤔
did they do a Proton?
I think proton dodged a bullet as the comment of the CEO was only not okay, but not like super bad. But if you funnel 300k to a openly racist idiot, that’s super bad. Same with Mullvad. As soon as money flows, you are immediately batshit crazy.
Seems closer to a Mullvad
1Password does not endorse hateful, dehumanizing, or exclusionary views, including those shared publicly by DHH.
Except… ya just did. Big 'ol cashy money endorsement.
Or did you forget about that already? Because we didn’t.
Art / artist.
Keep in mind that internal fights among community discourage users from shifting and benefit Microsoft. I would not be surprised if the smear campaign is a big tech initative.
That’s right. But are you suggesting we just sweep it under the rug and ignore the support of racist people? Because that is what big tech does and not a lot of people like it
DHH is bell end, maybe a good developer, but a bad human being. And there are other distros out there.
… Can we not just write shit down?
I don’t understand the need for this password keeper shit outside of a work/corporate environment.
The hard password you think of are actually very low entropy and easy to crack, the only good ones are random ones, which are hard to remember (except for the random words ones). It’s impossible to remember 200+ totally random password for a regular human
That’s why you write them down.
Yes and the password managers automate it such that you don’t have to write 20+ long random characters multiple times a day
You can’t just write down a secure password. It should be long enough to not be practical to write down on paper.
I have more than 300 logins. My password manager handles passkeys, 2FA and has integretad alias creation.
At some point you just can’t compare.
That feels excessive and I genuinely think y’all are paranoid about how often people are trying to hack you. Been running the same few for like a decade with no issues. Now I have a relatively low online footprint but still, the tech world in general is starting to feel like a form of psychosis.
I do write stuff down. In my password manager so it’s always with me all the time and is much more difficult to gain access to than if I were carrying around a notepad. Also, I ain’t got pockets for that, and I’m not buying a wardrobe of cargo pants.
Write down passwords? The fuck are you talking about??
A fucking notebook you keep with password info at home? Like what is confusing about that.
Write that shit down.
Ok Grandma and her password book.
The point:
Application unique passwords and MFA in the one package. Cross platform so I can use on phone and PC. Costs like $10/year. Also locks the credential and passkey to set URLs so phishing attacks are harder.
of Omacom, the nonprofit foundation that oversees a popular Linux distribution known as Omarchy.
popular?! According to whom?
From Omarchy’s site:
malleable OS for the age of agents. Where you can vibe your way through every alteration, tweak, and desire. Be the Omarch and command your agent!
Wtf
All seven users.
