I am very confused by this update message I got from KDE Discover when updating my Fedora Linux.
Bitwarden wants new permissions:
Home folder access: Can read and write files in the following locations without asking for permission:
Below, it lists what look to be profile folders for chrome, edge, chromium, firefox and "mozilla".
In addition, it wants system folder access: some xdg-config paths for several browsers and the Downloads folder!
What is this?
I cannot find any explanation for this.
Going to uninstall anyways, no thanks.
Rather use the website then, until I setup my own VaultWarden, unless I figure out a good sync for KeePass.
10 Comments
somethingsomethingidk@lemmy.world · 7 pts · 85d
It looks like it's partially related to an issue the integration between the desktop app and browser extension.
This issue at least explains needing <browser_stuff>/NativeMessagingHosts
https://github.com/bitwarden/clients/issues/18996
Idk about the other stuff though
DarrinBrunner@lemmy.world · 6 pts · 85d
That is a very good question.
I switched to KeePass, I don't need to sync.
passenger@sopuli.xyz · 2 pts · 85d
I do use it but I need some kind of sync between android (grapheneos), windows and linux. This is what I have been using Bitwarden for. I guess it's time to self-host Vaultwarden. Or this termux-syncthing trick I hear about...
BlueKey@fedia.io · 3 pts · 85d
If you can selfhost, you might also consider an SFTP or WebDav server, as Keepass2Android supports these (and more) ways to sync the databasefile. For Linux (and Windows I think) there are applications like Free File Sync.
passenger@sopuli.xyz · 2 pts · 85d
Thanks! Sftp might be the way to go for me...
Can kp2a open several databases at once?
BlueKey@fedia.io · 1 pts · 85d
I'm not sure, but I think no.
hobwell@sh.itjust.works · 1 pts · 85d
I just setup syncthing for this. I’m only syncing on the local network, but I think it has options to reach across the net.
eager_eagle@lemmy.world · 5 pts · 85d
Open an issue or discussion in their repo.
passenger@sopuli.xyz · -3 pts · 85d
Well, I just got rid of the app so that's that. And I don't have a github login at hand. If someone can open an issue, feel free. I would like some answers on why they did this. Or is this because of flathub somehow?
boatswain@infosec.pub · -2 pts · 85d
Why not just use SyncThing for syncing? It works well and is painless to set up.