Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Isn't bitwarden[0] already open source and aren't you just asking people to trust you till you take VC money?

[0] - https://github.com/bitwarden/server



Not only that but even the clients are open source ( https://github.com/bitwarden/clients ).

There's even an unofficial Rust reimplementation of the server which is even better.

Parent post is spreading FUD on this one.


The product being open source doesn't prevent the situation the OP mentions. It just provides a mitigation or a workaround by forking.

I also hope it won't happen but many good projects have gone this way before.

In this case the investment is not for the password manager but for a new identity service. However if that doesn't end up providing the promised results, the shareholders will start looking at the existing successful product to extract more value. After all they own part of that now and they want their returns. It's just what they do. This will clash with the users' best interests sooner rather than later.

Then it becomes forking time but can they find a good maintainer? Open source is not always a guarantee for continuity.

Of course if the new project pans out this won't happen but it's a gamble, and one the existing userbase never asked for.


There is already a well-maintained third party implementation of the server.


The server and client are open-source, and independently audited regularly since 2018

https://bitwarden.com/blog/bitwarden-network-security-assess...


Yeah the Rust version works well. I had an issue with it when importing passwords from a file exported from Dashlane, but other than that no issues. And I run it on a bottom tier Digital Ocean vm.


Lots of people can't set up their own bitwarden servers on a slow weekend. Yeah I can, but I venture 98% of people can't. Sorry, you're assuming everyone (including every HN audience) member can do that. Are we supposed to just keep quiet? I think we all know what happens when the VC folks come in. If you haven't lived through it (I have a few times now) you've at least heard about it if you read tech news at all. As long as the comments are respectful I don't see any reason to gatekeep them


That's how it looks to me as well. OP's claim borders on FUD and comes a bit disingenuous while shilling their project. Bitwarden is opensource as well and there's also this independent popular 3rd party project that uses the bitwarden protocol that is much loved by the community.[1]

1: https://github.com/dani-garcia/vaultwarden


When the person declares it's their project, it's not disingenuous.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: