Path: ...!news.mixmin.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Sequoia 15 - Passwords / Errata
Date: 24 Sep 2024 21:56:44 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 69
Message-ID: <llgqssF59maU1@mid.individual.net>
References: <xhEHO.90336$15a6.30418@fx12.iad>
 <YFzIO.95207$WtV9.70832@fx10.iad> <llge41F3c45U1@mid.individual.net>
 <YMFIO.272776$_o_3.55929@fx17.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net 1SGo2gOeLcKu6CKnoYhJrgmuqajj1ZzeHmbKv1ue1RYsY7bphs
Cancel-Lock: sha1:KP1IbceWAVNRvUu9Rx9xog+XtjM= sha256:Egdu5P8t0momFZ4vS2iFRuEHFepbhuRcWui2qXCzIXg=
Mail-Copies-To: nobody
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM
 dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW<
 ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e
 up1/bO{=-)
User-Agent: slrn/1.0.3 (Darwin)
Bytes: 4525

On 2024-09-24, Alan Browne <bitbucket@blackhole.com> wrote:
> On 2024-09-24 14:18, Jolly Roger wrote:
>> On 2024-09-24, Alan Browne <bitbucket@blackhole.com> wrote:
>>> On 2024-09-21 14:30, Alan Browne wrote:
>>>
>>>> One thing that is dumb about it is it assumes all passwords are for
>>>> some website.  Does not appreciate that some passwords are for other
>>>> uses.  Workaround: fake website name.
>>>
>>> Oopsie.  That is not correct - you can enter the name for a password
>>> that is not related to a website.  No user name either.  Then password
>>> and a note if needed.
>>>
>>> Getting quite good.
>>>
>>> So long 1Password, we hardly knew ye.
>> 
>> I've been using Apple's password manager for decades. The only reason
>> I've ever considered using anything else is for cross-platform
>> compatibility, which just isn't a big deal for me since my iPhone is
>> always easily accessible in my pocket or on my desk anyway.
>> 
>> I do have a minor gripe with the new Passwords app: When viewing the
>> details page for a given password, the 2FA code doesn't display any sort
>> of visual count down to when they expire and change to a new number.
>> So you might start to enter a number only to have it change before you
>> are done. Other 2FA authenticator apps I've used give you an indication (such as
>> the codes turning yellow, then red, the closer they are to expiration).
>> However, if you instead view the "Codes" page where all 2FA codes are
>> listed, there is a countdown at the very top. And on Apple's
>> devices/computers, you don't often need to enter a number manually since
>> it's all automated with a single click. That makes this a minor gripe at
>> best.
>
> Haven't used Apple Password 2FA gen'd codes so no comment - but I get 
> what you mean.  Usually (from my side) the 2FA is the site I'm logging 
> onto sending a code via SMS (which is not super secure[1]).

If those sites support authenticator apps where a code is automatically
generated without need for messaging, you should consider using them
instead as it's much more secure. That's what I am referring to above.

> I liked 1Password as I'd buy a license and I could run it on various 
> machines, OS's and browsers seamlessly.  Every 4 - 5 years I'd have to 
> upgrade so another $25 CAD or whatever.

That seems like the most beneficial reason to use it to me.

> When they went rental I vowed to not follow (and had an exchange of 
> messages with the co. founder on the issue).   1Password still works on 
> my Macs and iPhone - but no longer in browsers (2 years now?).  No idea 
> for Windows as I don't use it except for a dwindling graphics use case. 
> Never used it on Linux that I recall - maybe in old-old browser only 
> days... not sure.
>
> Also 1Password provided for encrypting all sorts of stuff beyond just 
> login creds - so there's that too.  But not a biggie.
>
> With the new Apple version there's a bug logging into my bank however. 
> Hopefully gets resolved - otherwise I have to copy paste the password.

Try right-clicking the password field and choosing Autofill > Passwords.
I've found on finicky websites that works as a fallback.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR