38
1password implementing privacy-preserving telemetry system (blog.1password.com)
submitted 3 years ago by to c/technology@beehaw.org
30 comments fedilink hide all child comments
 

"We won’t be collecting your saved passwords, passkeys, usernames, and any URLs associated with your items. Your private information is just that – private.

All event data will be de-identified and processed in aggregate before it’s used for analysis. "

It sounds like they plan on releasing the technical details in the coming days/weeks. I'm curious how its de-identified and processed.

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 3 years ago (6 children)

Sigh. What’s a good alternative for iOS?

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] 8 points 3 years ago* (last edited 3 years ago) (1 child)

    If you're not willing to trust what they say about the anonymity of the telemetry system, or to opt out, then I think you wouldn't be happy trusting them with all your passwords in the first place!

    If you're willing to stick to Safari, then I think using Apple Keychain is best, especially since they'll be adding sharing this year.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 3 years ago (1 child)

    Yeah this is what I don’t get. They already hold your most precious secrets and now you don’t trust them with a telemetry system?! Seems an odd order of concerns to me.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 3 years ago

    Telemetry, even scrubbed, can provide enough meta data to de-anonomize the user. If the goal is to reduce your threat vectors, than it's a valid concern.

    Given data breeches are increasing, the less data that is collected the better.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 3 years ago

    Come on - this is 1Password we are talking about; I think they’ve earned a little bit of goodwill given their past behaviour. Transparency is key. Keep in mind that they could do almost whatever they want without telling us.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 3 years ago

    This seems transparent, well thought out, and opt-in. The headline concerned me but once I read the article this seems fine. I moved from LastPass to 1Password because of the horrible communication around breaches in the last few years.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 3 years ago

    I’m happy with enpass myself for s few years now. it has all kind of sync options and wifi p2p sync if you want to be offline. they offer subscription shit, but luckily also a normal software license to buy.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 3 years ago

    You can use keepassXC and "self-host" your passwords on any cloud-storage you want (it's just a file after all), but if you are using 1Pass at the moment, I don't see an opt-in anonymized telemetry system as a reason to switch.

  • permalink
  • fedilink
  • source
  • parent