6 ms·

Isn't bitwarden[0] already open source and aren't you just asking people to trust you till you take VC money? [0] - https://github.com/bitwarden/server https:/

by mcdan 4y ago

Isn't bitwarden[0] already open source and aren't you just asking people to trust you till you take VC money? [0] - https://github.com/bitwarden/server https://github.com/bitwarden/server

FlyingSnake 4y ago
That's how it looks to me as well. OP's claim borders on FUD and comes a bit disingenuous while shilling their project. Bitwarden is opensource as well and there's also this independent popular 3rd party project that uses the bitwarden protocol that is much loved by the community.[1] 1: https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
- robertlagrant 4y ago
  When the person declares it's their project, it's not disingenuous.
nacs 4y ago
Not only that but even the clients are open source ( https://github.com/bitwarden/clients https://github.com/bitwarden/clients ). There's even an unofficial Rust reimplementation of the server which is even better. Parent post is spreading FUD on this one.
- toqy 4y ago
  Yeah the Rust version works well. I had an issue with it when importing passwords from a file exported from Dashlane, but other than that no issues. And I run it on a bottom tier Digital Ocean vm.
- folkrav 4y ago
  The server and client are open-source, and independently audited regularly since 2018 https://bitwarden.com/blog/bitwarden-network-security-assessment-2020/ https://bitwarden.com/blog/bitwarden-network-security-assess...
- GekkePrutser 4y ago
  The product being open source doesn't prevent the situation the OP mentions. It just provides a mitigation or a workaround by forking. I also hope it won't happen but many good projects have gone this way before. In this case the investment is not for the password manager but for a new identity service. However if that doesn't end up providing the promised results, the shareholders will start looking at the existing successful product to extract more value. After all they own part of that now and they want their returns. It's just what they do. This will clash with the users' best interests sooner rather than later. Then it becomes forking time but can they find a good maintainer? Open source is not always a guarantee for continuity. Of course if the new project pans out this won't happen but it's a gamble, and one the existing userbase never asked for.
  - lern_too_spel 4y ago
    There is already a well-maintained third party implementation of the server.
- stjohnswarts 4y ago
  Lots of people can't set up their own bitwarden servers on a slow weekend. Yeah I can, but I venture 98% of people can't. Sorry, you're assuming everyone (including every HN audience) member can do that. Are we supposed to just keep quiet? I think we all know what happens when the VC folks come in. If you haven't lived through it (I have a few times now) you've at least heard about it if you read tech news at all. As long as the comments are respectful I don't see any reason to gatekeep them

by mcdan 4y ago

Isn't bitwarden[0] already open source and aren't you just asking people to trust you till you take VC money? [0] - https://github.com/bitwarden/server https://github.com/bitwarden/server

FlyingSnake 4y ago

That's how it looks to me as well. OP's claim borders on FUD and comes a bit disingenuous while shilling their project. Bitwarden is opensource as well and there's also this independent popular 3rd party project that uses the bitwarden protocol that is much loved by the community.[1] 1: https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden

robertlagrant 4y ago
When the person declares it's their project, it's not disingenuous.

nacs 4y ago

Not only that but even the clients are open source ( https://github.com/bitwarden/clients https://github.com/bitwarden/clients ). There's even an unofficial Rust reimplementation of the server which is even better. Parent post is spreading FUD on this one.

toqy 4y ago
Yeah the Rust version works well. I had an issue with it when importing passwords from a file exported from Dashlane, but other than that no issues. And I run it on a bottom tier Digital Ocean vm.
folkrav 4y ago
The server and client are open-source, and independently audited regularly since 2018 https://bitwarden.com/blog/bitwarden-network-security-assessment-2020/ https://bitwarden.com/blog/bitwarden-network-security-assess...
GekkePrutser 4y ago
The product being open source doesn't prevent the situation the OP mentions. It just provides a mitigation or a workaround by forking. I also hope it won't happen but many good projects have gone this way before. In this case the investment is not for the password manager but for a new identity service. However if that doesn't end up providing the promised results, the shareholders will start looking at the existing successful product to extract more value. After all they own part of that now and they want their returns. It's just what they do. This will clash with the users' best interests sooner rather than later. Then it becomes forking time but can they find a good maintainer? Open source is not always a guarantee for continuity. Of course if the new project pans out this won't happen but it's a gamble, and one the existing userbase never asked for.
- lern_too_spel 4y ago
  There is already a well-maintained third party implementation of the server.
stjohnswarts 4y ago
Lots of people can't set up their own bitwarden servers on a slow weekend. Yeah I can, but I venture 98% of people can't. Sorry, you're assuming everyone (including every HN audience) member can do that. Are we supposed to just keep quiet? I think we all know what happens when the VC folks come in. If you haven't lived through it (I have a few times now) you've at least heard about it if you read tech news at all. As long as the comments are respectful I don't see any reason to gatekeep them