Bitwarden

1187 readers

31 users here now

Discuss the Paswordmanager Bitwarden.

founded 3 years ago

MODERATORS

wuffa@discuss.tchncs.de

Why does Bitwarden need access to my browser profiles and downloads directory suddenly? (sopuli.xyz)

submitted 6 hours ago* (last edited 6 hours ago) by passenger@sopuli.xyz to c/bitwarden@discuss.tchncs.de

8 comments fedilink hide all child comments

I am very confused by this update message I got from KDE Discover when updating my Fedora Linux.

Bitwarden wants new permissions:

Home folder access: Can read and write files in the following locations without asking for permission:

Below, it lists what look to be profile folders for chrome, edge, chromium, firefox and "mozilla".

In addition, it wants system folder access: some xdg-config paths for several browsers and the Downloads folder!

What is this?

I cannot find any explanation for this.

Going to uninstall anyways, no thanks.

Rather use the website then, until I setup my own VaultWarden, unless I figure out a good sync for KeePass.

top 8 comments

sorted by: hot top controversial new old

[–] somethingsomethingidk@lemmy.world 5 points 4 hours ago

It looks like it's partially related to an issue the integration between the desktop app and browser extension.

This issue at least explains needing <browser_stuff>/NativeMessagingHosts

https://github.com/bitwarden/clients/issues/18996

Idk about the other stuff though

[–] DarrinBrunner@lemmy.world 6 points 5 hours ago (1 children)

That is a very good question.

I switched to KeePass, I don't need to sync.

[–] passenger@sopuli.xyz 2 points 4 hours ago (2 children)

I do use it but I need some kind of sync between android (grapheneos), windows and linux. This is what I have been using Bitwarden for. I guess it's time to self-host Vaultwarden. Or this termux-syncthing trick I hear about...

[–] BlueKey@fedia.io 3 points 4 hours ago

If you can selfhost, you might also consider an SFTP or WebDav server, as Keepass2Android supports these (and more) ways to sync the databasefile. For Linux (and Windows I think) there are applications like Free File Sync.

[–] hobwell@sh.itjust.works 1 points 2 hours ago

I just setup syncthing for this. I’m only syncing on the local network, but I think it has options to reach across the net.

[–] eager_eagle@lemmy.world 3 points 4 hours ago (1 children)

Open an issue or discussion in their repo.

[–] passenger@sopuli.xyz -1 points 4 hours ago* (last edited 4 hours ago)

Well, I just got rid of the app so that's that. And I don't have a github login at hand (kind of related). If someone can open an issue, feel free. I would like some answers why they did this. Or is this because of flathub somehow?

[–] boatswain@infosec.pub -1 points 2 hours ago

Why not just use SyncThing for syncing? It works well and is painless to set up.