Hacker Newsnew | past | comments | ask | show | jobs | submit | more woadwarrior01's commentslogin

1Password used to be good 10 years ago, but not anymore. A couple of days ago, there was a post about Electron based apps that slow down macOS Tahoe (due to older versions of Electron using an undocumented API). When I ran the script on my laptop, 1Password was on the top of the list.

> 1Password.app: Electron 37.3.1 (Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework)

[1]: https://news.ycombinator.com/item?id=45437112

Edit: Judging by the downvotes, it looks like there are a lot of electron lovers here. Why the hate for more efficient native apps? Are bloated binaries, janky UI and lower battery life, features? :)


It's only on top of the list because it's likely to be first when you sort by app name.


That's a 47 day old release and the fix for the macOS issue only came out 7 days ago. Not critically out of date by any means.


How did you come to the conclusion that this very recent issue is 1Password’s fault and not Electron’s?


1Password used to ship native (aka "Mac-assed") apps. They (relatively, in the software's history) recently switched to Electron instead of continuing native app development.


So again, how does an Electron bug become 1Password's fault?

It's cross-platform and integrates with browsers so it makes sense they would want to use a cross-platform JavaScript solution as much as possible. Not just to make their developers more efficient, but to reduce the surface area for bugs and vulnerabilities.


1Password used to be an excellent native app. It's not surprising that many users (myself included) resent the enshittification.


I've used it for years and am only finding out today that it's Electron. And I couldn't care less.

99.9% of my usage is within the browser plugin anyways. And whenever I have to edit an entry, it works fine.


> 99.9% of my usage is within the browser plugin anyways.

If you don't (or barely) use the app, the app is not an issue to you; that seems pretty self-evident.

The experience for regular users may differ.


What is the problem with it? And isn't everyone using the browser plugin anyways mostly? Isn't that where the vast majority of passwords get entered?


Personally, I use it as much for other secrets as for browser passwords. Social security numbers, software licenses (not so much anymore), password reset questions, passwords I can't paste (for work), etc.

I don't use a plugin. Never tried it, simply never mattered enough (and I generally store frequently-used browser passwords in the browser's keychain as well).


Genuinely curious: why would you pay for 1Password but then use your browser's password manager? Now you have to keep track of updating passwords in two places? Or remembering which sites are stored in which password manager? That's breaking my brain.


You personally disliking something isnt enshittification.


It was done at roughly the same time that the company switched to a subscription model and their focus switched from consumer to business.


...shortly thereafter, Apple released their own Passwords app, largely Sherlocking 1Password from a consumer perspective.

If this had been your business, what would you have done? I would have done exactly what they did.


You raise an excellent point, and the truth is that I don't know.

That doesn't change the consumer perspective: I'm paying more for a worse product.


The nightly version(on Linux) is on 38.2.0


I guess you're being downvoted because you've just now realized that 1password is electron-based and you're using that discovery it to retro-actively confirm your pre-existing bias that electron = bad.

If electron was actually always bad, you wouldn't need a script to scan your machine and tell you which apps to hate, you'd just know "yep that's slop" upon first opening the app. Yet that is not the case. Because electron is a tool, and it's sometimes used so well that you don't even notice it until you run a script.


It used to be a native app.


There's a way out. Build your own company and make it something beneath you.


If you have other people working at your company or investors, politics will come into play.

It's rare to have a CEO that can decide things 100% by themselves and still retain talented employees. It's also super rare to have investors with zero desire to determine a company's direction.


On that level, there are other policies.

Politics in standards bodies, industrial organisations, regulatory issues, funding and investment, etc


I’ve been on both sides of the table. To me, all of those are far more palatable than petty company politics (both in BigTech and startups).


When I've reported to founders they were front and center in the politics (which is probably how it should be).

Becoming a career CEO might be a way out, though.


A fish rots from the head down.


Yeah, and you can also get rid of local politics by moving to the countryside and homesteading. And you can bypass national politics by homesteading on a ship or an island that nobody cares about. And you can just move to a different planet to escape global politics. But any group of people will develop some form of politics, and to do anything meaningful longterm, you need a group of people, not just an individual, why not get better at politics? It is inevitable you will have to take part in them.

But of course, I still want my hut in the woods.


There's an even better way out, implement workplace democracy.



I do not see MIG mentioned in either paper. I do not think the papers are examining isolation security between instances, which the GP was asking about.


Yeah, I only posted two links from my notes, from when I was looking at this a few months ago. Here's one on MIG.

https://arxiv.org/abs/2207.11428


As per sibling comment, this is about utilization efficiency and not breaking isolation (between MIG instances). The conclusion:

> In this paper, we presented MISO, a technique to leverage the MIG functionality on NVIDIA A100 GPUs to dynamically partition GPU resources among co-located jobs. MISO deploys a learning-based method to quickly find the optimal MIG partition for a given job mix running in MPS. MISO is evaluated using a variety of deep learning workloads and achieves an average job completion time that is lower than the unpartitioned GPU scheme by 49% and is within 10% of the Oracle technique.


That paper doesn’t seem to be about security vulnerabilities in MiG but rather using it to improve workload efficiency


Link to their huggingface account with (some of) the model weights. I couldn't find a link to it on their website, white paper or GitHub.

https://huggingface.co/OpenTSLM


The cycle time seems rather long, in the order of months to years (See table 1 on pg 18 of the paper).

Who is working on AI agents startup to automate this? /s


They probably use AI quite a lot.


There's a community maintained fork.

https://github.com/vibevoice-community/VibeVoice


It looks like they have a GPL licensed "community edition" and a closed $19.99/month commercial edition. I supposed the GPL licensed version's raison d'etre is marketing, since non-technical users cannot tell the difference between the two.


The grass is always greener on the other side. I live in the EU and GDPR isn't much better. All it requires is "informed consent" (i.e a click or a tap on a button) from the "data subject" and people can evade privacy with impunity. The only side effect is that those of us on this side of the pond, get ugly cookie banners.


> All it requires is "informed consent" (i.e a click or a tap on a button) from the "data subject"

Correct. Clear, opt-in informed consent to use personal data is the fundamental principle of the GDPR. As it should be. I'm puzzled why you think this is a negative.

> and people can evade privacy with impunity.

Certainly not. The GDPR does not permit data trawling or allowing data controllers to do what they like with your personal data once they have it. It must only be used for the purpose it was requested for.

> ugly cookie banners

Once again, there is no requirement for 'cookie banners'. You are free to use whatever cookies you want to run your site. HOWEVER, if you are using those cookies to track me (advertisers take a bow) then you need my clear, opt-in informed consent to do so. And so you should!

I continue to be astounded at the ignorance some people have of such a vital privacy law; one that is fundamental to modern data use and respect for the customer.


> Certainly not. The GDPR does not permit data trawling or allowing data controllers to do what they like with your personal data once they have it. It must only be used for the purpose it was requested for.

You might want to read the privacy policies of some of the European fintech and ad-tech companies (nb: I've worked at some of them). They cast a wide blanket over all purposes.

At best, the GDPR only introduces a minor indirection, the problem of hoodwinking the "data subject" into clicking the accept button. At worst, it gives them false sense of privacy, where there isn't much.


> At best, the GDPR only introduces a minor indirection, the problem of hoodwinking the "data subject" into clicking the accept button

True. Some people are daft enough to opt-in and click the "accept cookies" and "give my personal and location data to strangers" buttons. These people don't care about privacy and are beyond help.

> At worst, it gives them false sense of privacy, where there isn't much.

Those of us who bother to understand and use privacy law have very good protection thankyouverymuch.


> we support 0-day retention, and we don’t train models on customer data.

Checks out the website[1]:

> By default, all media associated with a recording is retained indefinitely. If needed, you can request early deletion of this data at any time via our API.

Data shared with 25 "subprocessors", some of who also retain data indefinitely. Yikes!

[1]: https://security.recall.ai/


There's no contradiction. One statement is about the default, the other is about the possibility.


The contradiction is that some of those sub-processors retain data indefinitely[1], with no possibility of deletion.

[1]: https://arstechnica.com/tech-policy/2025/06/openai-confronts...


MLX does not support the ANE.

https://github.com/ml-explore/mlx/issues/18


Yes it does.

That’s just an issue with stale and incorrect information. Here are the docs https://opensource.apple.com/projects/mlx/


No, it categorically doesn't. Not just that, it's CPU support is quite lacking (fp32 only). Currently, there are two ways to support the ANE: CoreML and MPSGraph.


Nothing in that documentation says anything about the Apple Neural Engine. MLX runs on the GPU.


None of that uses the ANE.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: