553

Bitwarden Desktop version 2024.10.0 is no longer free software (github.com)

submitted 2 months ago by pnutzh4x0r@lemmy.ndlug.org to c/opensource@lemmy.ml

119 comments fedilink hide all child comments

Pull request #10974 introduces the @bitwarden/sdk-internal dependency which is needed to build the desktop client. The dependency contains a licence statement which contains the following clause:

You may not use this SDK to develop applications for use with software other than Bitwarden (including non-compatible implementations of Bitwarden) or to develop another SDK.

This violates freedom 0.

It is not possible to build desktop-v2024.10.0 (or, likely, current master) without removing this dependency.

(page 3) 21 comments

sorted by: hot top controversial new old

[-] preasket@lemy.lol 2 points 2 months ago

We need a fully community run password manager with row-level server synchronisation between devices and shared vaults. Maybe a new client for the Bitwarden protocol with Vaultwarden or something new. E.g. 1password's secret key as a second factor is, imho, their best feature. It pretty much eliminates the possibility of the vault being decrypted due to a weak master password.

load more comments