Technology
This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.
Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.
Rules:
1: All Lemmy rules apply
2: Do not post low effort posts
3: NEVER post naziped*gore stuff
4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.
5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)
6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist
7: crypto related posts, unless essential, are disallowed
view the rest of the comments
Outages may only affect you if you're syncing a new device or making a write (adding or editing an entry), otherwise your entire vault is available locally.
And that's not even a limitation at all, it's a trade-off. The convenience of syncing devices beats the crap of keepass* solutions for most. And even as a syncthing user, I would absolutely hate having to manage vault sync conflicts myself.
I don't know if they changed something recently, but when there was an outage a few months ago, you couldn't even open the app nor use the extension https://old.reddit.com/r/Bitwarden/comments/14yk2ax/bitwarden_down_this_morning/
No, that's a limitation AND a trade-off. The stupidity of trusting a third-party cloud provider to manage something as important as all of your fricking passwords is mind-blowing. It's as if you people haven't learnt anything at all from LastPass.
I'm a Syncthing user myself and NEVER had a sync conflict syncing my Keepass db across a dozen devices - not even once.
LastPass had a list of concerning design choices, using cloud is not one of them. Your personal preference here is irrelevant.
It's really not. You can't expect the average user to set up yet another service to sync their devices in a way that is conflict-free and available at all times for writes. Sooner or later a write will be lost. It's very much a trade-off between partition tolerance (synchronization of multiple devices), consistency, and availability - see the CAP theorem.
Bitwarden maintains consistency by refusing writes when the server is unreachable. Keepass just delegates partitioning to another service entirely (e.g. Syncthing), which opens the possibility of losing edits.
Considering the breaches lastpass had in just the last year, using their cloud service is absolutely a concerning choice. how they got breached is especially egregious.