Introducing Remembear, new password manager

95 点作者 anuragsoni超过 7 年前

17 条评论

tptacek超过 7 年前

From the Cure53 report: the version tested had a terrible vulnerability (unfortunately somewhat common to password managers): it tries to match passwords to subdomains, and in doing so misparses domains, allowing it to be tricked into giving passwords to bogus almost-look-alike domains. Yikes.Meanwhile: they've got a crypto protocol tunneled over TLS "to avoid heartbleed" and some other convoluted stuff the auditors complain about. You really want to see a password manager get the basics right.Notice also that the end of the Cure53 report complains about the project scope and the amount of time given. This is pretty unusual for Cure53, who have a reputation for being a bit effusive about the products they're paid to review. I'm not sure I've ever seen them throw shade before.

评论 #15778553 未加载

评论 #15777353 未加载

评论 #15777350 未加载

评论 #15777662 未加载

评论 #15777406 未加载

评论 #15778896 未加载

评论 #15779532 未加载

评论 #15778805 未加载

评论 #15777328 未加载

jedisct1超过 7 年前

It might be a good alternative to Enpass. They use Rust and libsodium, which is a good sign.But browser integration is the trickiest part in a modern password manager, yet what makes a password manager actually usable for most people.So, give it some time before using the browsers (currently only Chrome) extension. Virtually all other password managers had security issues here.Making these extensions smart (able to guess where login and password fields are, when passwords are being updated, etc) is also far from trivial. It's actually way more complex than password storage.Gonna stick with Enpass for now, but that's definitely a project to watch.

评论 #15777426 未加载

WillPostForFood超过 7 年前

I think they are burying the lede, and being a little disingenuous with the big "Get Started, It's Free" button.we will be introducing subscription-based pricing when RememBear leaves the public beta phase. <a href="https://help.remembear.com/customer/en/portal/articles/2890744-how-much-does-remembear-cost-" rel="nofollow">https://help.remembear.com/customer/en/portal/articles/28907...</a>A non-subscription product would be one thing that would get me to move off 1password.

dwg超过 7 年前

What differentiates RememBear from other password managers? After looking through the blog and website it's not immediately clear to me. What makes (or will make) RememBear better than, say, 1password, which appears to have the same features, is also easy to use, and has a long history with which to work out issues?

评论 #15777347 未加载

评论 #15777392 未加载

评论 #15777585 未加载

0xmohit超过 7 年前

I <3 pass [1]. Earlier discussion [2] on pass here.[1] <a href="https://www.passwordstore.org/" rel="nofollow">https://www.passwordstore.org/</a>[2] <a href="https://news.ycombinator.com/item?id=14819136" rel="nofollow">https://news.ycombinator.com/item?id=14819136</a>

craftyguy超过 7 年前

Seems to be yet another proprietary walled garden. No thanks.

评论 #15777313 未加载

DonHopkins超过 7 年前

Great name! So much more evocative than "Remembr".Let's hope they succeed, and inspire other companies to append a penultimate "a" after the penultimate "e", instead of just removing the penultimate "e".

评论 #15778238 未加载

solomatov超过 7 年前

I use 1Password, and the only incentive which make me switch is completely open source good quality UX solution.

评论 #15778623 未加载

评论 #15777408 未加载

评论 #15777610 未加载

ramidarigaz超过 7 年前

If any of the Remembear developers read this, I'd love to put in a request for a Linux client!

dom96超过 7 年前

I'm currently using LastPass and their macOS app seriously annoys me (why do I have to click an OK button every time I save a new password?).They seem to get their UI right at least. Plus, bears are cute.Edit: No support for folders/categories it seems. That sucks a bit.

评论 #15778679 未加载

评论 #15778592 未加载

satysin超过 7 年前

Looks nice but only has a Chrome extension at the moment. Also the browser extension requires the desktop app be installed.

评论 #15777258 未加载

评论 #15777260 未加载

5_minutes超过 7 年前

"Subscription pricing"... if anyone is looking for an actual good business model, is for the upcoming "1password refugees"... and all we want is the same stuff, but not subscription based.

wpietri超过 7 年前

Ooh, what a great example of a brand extension.When I saw "new password manager" in the headline, my first thought was "those guys are fucked". What people want with a password manager is trust and stability, two things not associated with startups. But these folks have millions of users, strong app store ratings, and solid reviews. Going from "trust us with your data and privacy" to "trust us with your passwords" is not a big step.I'd give my current password manager, LastPass, a C- on usability, so I'll be keeping an eye on this. I'd love to have something better to recommend to novices, and might even switch myself.

phnofive超过 7 年前

>Where does RememBear store my passwords and how are they protected?>RememBear encrypts your passwords using both your Master Password and a unique device key generated by the application. It stores your passwords in an encrypted file on your device and on our secure servers for sync and backup purposes. However, RememBear will only encrypt and decrypt the items on your physical device. This means that your passwords and other items are always encrypted during syncing and remain encrypted when in storage on our secure servers. You and ONLY you are ever able to access your items as long as you keep your master password private.Proprietary sync, no thanks.

m3kw9超过 7 年前

It would be great if they can clearly tell how they differentiate from 1Password.

Rjevski超过 7 年前

Electron?

residude超过 7 年前

It is from tunnelbear. If you are releasing it for free, why isn't the code public?