1Password wades into a right-wing mess after funding a Linux project
a month ago by ryper to c/technology
1Password faced immediate backlash from customers this week over a $300,000 pledge in support of a Linux distro created by David Heinemeier Hansson, who has regularly published overtly racist blog posts that include comments calling for deportation of ethnic minorities in Europe. The popular password manager is now a “distinguished corporate patron” of Omacom, the nonprofit foundation that oversees a popular Linux distribution known as Omarchy.
Archive: https://archive.is/osNh3
Billionaires like racists?
Per @GreenBeard@lemmy.ca's comment
I think we all know why. Whether having money causes racism, or it just so happens that racists are the ones with the money and they're good at keeping it "In The Family" so to speak is kind of tangential and academic. It's the hateful bigots that have the cash to fund big things, so if you want funding, it pays to be trashy.
Bundling of their stuff into the base installation, I suppose. With simple math, if 1password gets like 33k subscription payments, that's about $100 000 already.
Omarchy got perhaps a 100K installations just last month.
They're buying customers and visibility with a sum that's probably pocket change for them.
I think we all know why. Whether having money causes racism, or it just so happens that racists are the ones with the money and they're good at keeping it "In The Family" so to speak is kind of tangential and academic. It's the hateful bigots that have the cash to fund big things, so if you want funding, it pays to be trashy.
1Password does not endorse hateful, dehumanizing, or exclusionary views, including those shared publicly by DHH.
Except... ya just did. Big 'ol cashy money endorsement.
Or did you forget about that already? Because we didn't.
Art / artist.
I've seen a handful of videos about it recently that have been pushed into my algorithm. There's definitely a campaign to get it out to influencers. Never heard of it prior to this week.
It's just a fork of Arch, with tiling, that's been slop coded with AI. Something anyone could recreate without AI in a couple hours if they're familiar with Arch.
Don't forget that's "macOS inspired".
Meanwhile actually good distros are drowning at the bottom of the ocean.
I only know of it because I was on Distro Watch this week looking for top mention distros I never heard of. The mentions position is likely because of this donation. lol
yeah this is like a bunch of other internet things where I kinda hate it even seeing it. for me its not a thing of interest.
I've heard the name but have not spent the time to find out what it is. I thought it was some immutable distro. I think the same about bazzite and catchy (sp?) which are other distros I see mentioned from time to time and believe are immutable and flatpak-y and that's all I know. I realise I'm just one data point but I never see a lot about these sorts of distros in my general browsing.
I'm not OP but yeah, basically. People who are passionate about a specific topic will know what's up in that area.
I can name half a dozen of the most popular Arch-based distros off the top of my head because... they're actually well-known. Meaning they've been around for years, I've used several personally and can argue their pros and cons, and they feature prominently in objective lineups like the Steam Hardware Survey. Omarchy is none of these things.
Still not convinced it's very popular.
It's virtually unknown in the Linux world too. It's literally something they made up overnight and are trying to astroturf.
I'd say "what a time to be alive" to see the day someone considers it worth astroturfing a Linux distro, except there's probably some nefarious shit behind it.
Nonetheless, it seems the company has sacrificed a moral position for a “mission-driven” position. In the same message to staff, Faugno says “the scale and growth of [Omarchy’s] use among our customers is significant - Omarchy has grown to be the second most used Linux distribution among 1Password users."
I didn't know Omarchy existed until, like, yesterday, so this is surprising. Do 1Password users just tend not to use Linux, so second place isn't many users?
I feel like this has to be made up, downstream repack distros almost never show up on the top 10 usage stats. You will always see Ubuntu way ahead of Kubuntu.
Not to mention 1Password is a pretty popular enterprise app and I have yet to see some insane sysadmin actually roll with arch as their distro of choice. Most are probably on RHEL or some other enterprise derivative.
It's probably not made up because 1Password is pre-installed and bound to a hotkey in Omarchy. Linux users making informed decisions about what to use for password management probably don't pick 1Password most of the time due to its terrible security record.
That piece of information seems like key context. 1Password didn't just give money simply because they like the product. More or less, it's product placement in return for funding.
I'm on the fence if that's better or worse.
Terrible security record?
Of the items listed in your link, only the second one seems problematic, in that I wish they had discovered the (non-password but still privacy related) issues first. Even that section acknowledges all of the issues are fixed. The only section that makes it sound like there is still a problem is the last one, which states that version X still contains the vulnerabilities, but in reality that's just how versions work. Patching a vulnerability creates a new version.
Is there ANY record of passwords being leaked from 1password because of their own lack of security??
lol what. 1Password literally has one of the best security records out there. They’re the ones actually inventing new more secure ways of doing things. The fact that those are all of the issues over the years and they’re one of the most popular pw managers on the planet is pretty indicative of how strong their security actually is. And they’ve never had a password breach, unlike lastpass.
They are nonfree.
I love the Oligarchy typo
Probably because Omarchy is preinstalling 1password.
Isn't that a commercial product for which great open source alternatives exist? What kind of distro does that?
And don't they also preinstall Basecamp, DHH's own company's product?
Maybe it's all just a vehicle for product placement.
What kind of distro does that?
One that does not care at all about having maintaining a sane and open ecosystem. Where there's money to make, they will prey down quickly. Now that people are somewhat convinced that Linux based systems can work and actually attract the general public, a whole new market is ripe for reaping.
Whatever it is, it's a stupid name, it sounds kinda like an STD.
makes me think of Orchi *perhaps NSFW depending on your workplace
Ha! Sounds like what the maintainers of that distro need.
- 12 mo: #21
- 6 mo: #19
- 3 mo: #16
- 1 mo: #12
Obviously growing in popularity. That's what aggressive marketing usually gets you.
If you don't like that, perhaps consider stop talking about it, and him. Instead, every second week somebody writes an article about "DHH is fascist". What the fuck do they think the effect of those articles is?
Are people actually so dumb that they think accusing him of fascism will make him disappear? That's like high-octane clickbait fuel.
Same with Trump et alia. It's garmonbozia.
The DistroWatch Page Hit Ranking statistics are a light-hearted way of measuring interest in Linux distributions and other free operating systems among the visitors of this website. They correlate neither to usage nor to quality and should not be used to measure the market share of distributions. They simply show the number of times a distribution page on DistroWatch was accessed each day, nothing more.
Its not even a distro. Its arch with dotfiles. Literally.
No repos, no custom packages, etc. Just arch with sloppy dotfiles.
They have repos now, but nothing in them is too advanced, and they absolutely do not deserve the money. GNU/Linux Mint offers THREE great desktop experiences, which are not kitsch slop (even if you don't like them, they're very high-quality) and have a much smaller budget.
Uhm...
There is also Vaultwarden which is basically a drop in for Bitwarden
now we need a fork/replacment for their shitty clients that have unreliable offline functionality and were on an EOL Electron for like 3 months, and for rbw which hasn't been updated in ages and has compatibility issues with bitwarden.com now
How the fuck is Omarchy "popular"? I've been on Linux going on a decade, give or take, and I first knew about it when someone here in Lemmy mentioned that Dell and some other shit companies were proton a few millions on it.
It's popular to a lot of the non Foss tech job devs that want to try Linux after mostly using macOS for Dev work. It comes with keybinds they are familiar woth has a pretty UI by default and is arch base. They probably work for companies that are also right wing so it's something they don't care about as much as people in alignment with the Foss ideology.
Compared to today's mask off fascism in the states the guy behind Omarchy is pretty tame and probably less mask off evil than the people they work for
And is being promoted by other fascists - Lex Fridman - and youtube sloppers like Primeagen. All channels highly consumed by non-techs or techs that follow the hype
To me it isn't pretty, just kitsch.
So YT’s algorithm is pushing right wing racist distros?
Huh. Wonder who is paying to make that algorithm work that way.
Lex Fridman, The Primeagen and friends are also to blame
1Password says "Our contribution is made to the Omacom Foundation, not to an individual" but there are many instances of their VP of product praising DHH https://x.com/jmeller/status/1971530423030387081 https://x.com/jmeller/status/2094132068342964671
Why I use KeyPass -- which is FOSS -- instead of entrusting everything to a privately-run paid website which can turn against everyone at anytime.
edit: to that wiseacre below, do you think it's better to go back to passwords in a notepad? 🤣
Yeah, it's good for personal use, it's indeed a reliable keyfob. But I believe there should be a version that works for your use case required for multiple users, and you can fork it then modify.
You know keepass is a local keystore, right? There is no "them".
Unless you're the one literally writing the program. It is being developed by other people who at any point in time could have issues. Just saying not saying they do now but it can certainly happen.
Well you better not use any software ever then, never know what 'can certainly happen'. Get a grip.
Its GPL licensed, there'll be a dozen different forks before you know it.
The passwords are saved into a vault file. You can choose a different software that is capable of opening the vault. I use keepassXC for example. there's some variety of programs that can open this filetype, on many different platforms.
You think if the developer bails out, the software will magically disappear from everywhere, leaving you with no way of recovery whatsoever?
Let's say they decide to pull the plug. Everything you have that's already running will keep running. Code can be forked (in fact with keepass, it already happened). Data can be exported after the fact. Other software can actually open keepass database file.
You really don't see the difference between this and "the server stopped sending you your own data, oops"?
You don't auto update it, and you store the keys locally, and if you need passwords on a device you use a VPN to access them, I'm not to concerned about updating my manager I'm more concerned about my VPN 😂
But I get what your saying.
The backlash to 1Password’s funding should have been predictable
Managers don’t know shit
Indeed. Maybe nazi?
It preinstalls their app.
Wasn't Omarchy literally just a couple of dotfiles for Arch and a easy Installer?
It is currently more than that, and it even has its own repos/mirrors, but the fact that basically every rich person is throwing money at this project should be a huge warning sign to everyone to avoid this.
But at the end of the day, it's nothing revolutionary. It's customized Linux with a tiling window manager, all funded by billionaires and developed by a turbo racist.
"Beautiful, fun and agentic linux"
I bet they vibe coded all of them lol, this is a HUGE red flag
Which are slop.
Why does Omarchy even need this money when it’s run by a billionaire?
This song have just been sent to Arch or some Linux foundations.
Because there are multiple Linux options, once the commercial versions flood in, the most marketed will grab the biggest share of the uninformed populace. So obviously the billionaires want to wrestle control over it.
Thankfully it looks so unserious that it will not capture anyone except 'windows/mac power users'.
Most people do not think of them as 'windows power users'.
PSA please stop using Archive.Today https://en.wikipedia.org/...
I vaguely remember hearing about that, but when I searched the community to see what other people use the first link I found was archive.is. Replacing that archive doesn't really seem to have taken off.
Your link is broken btw
I'll just copy-paste the first paragraph in case you or anyone else can't open it:
The English Wikipedia has decided to stop using archive.today and its related websites. This decision was agreed on after a request for comment with more than 200 participants concluded in February 2026, and is due to multiple concerns, including the site using editors' and readers' computers to run a denial-of-service attack and evidence that the website has tampered with some archived pages.
And the story on the DoS script itself:
For some reason it's including the period at the end as part of the link, which breaks it.
of Omacom, the nonprofit foundation that oversees a popular Linux distribution known as Omarchy.
popular?! According to whom?
Youtube has been feeding me Omarchy video lately, it seems like every single one I tried to watch brought up using Grok. I don't know anything about Omarchy, but it was enough to give me the feeling something wasn't right.
As bad as the "Nazi bar" problem seems to be in FOSS at the moment, it is definitely heartening to consistently see how immediate and overwhelming the pushback has been. I think it says a lot about the community, and it's a good thing.
Out of the loop... "Nazi bar"?
Dunno if this is the best source but
shouldn't you have switched to Bitwarden?
i am on bitwarden, and i want to switch to keepass, but i am dreading syncing the database between my phone and my PC.
You can use Syncthing to synchronize the database file between your devices. It's kinda neat tbh.
i never heard about it. but i will definitely look into it, thanks ❤️
Unfortunately Bitwarden might not be as super of a choice as it was https://howmation.com/... they're slipping into private equity.
At some point they'll stop supporting Vaultwarden, at that point anyone with skin in the game should 100% get out.
No, he shouldn't have switched to Bitwarden. Why the fuck do people keep recommending cloud shit instead of Keepass?
I don't know where this weird trope of thinking Keepass is somehow obsolete or inferior came from, because it isn't.
Keepass is great it if's just you. If you're sharing with a family, it's ill-equipped.
Sharing = putting the file on shared storage (Syncthing, Nextcloud, SMB, Git, etc.)
No per‑item permissions
No audit logs
No user roles
No built‑in conflict resolution
Can't you just do an export from BitWarden and import into KeePass?
what i meant was syncing my phone and my pcs keepass databases.
i used to use google drive for that (storing the database on the drive), but i didn't like it.
I've had success on android with Syncthing. I had it installed on every device I needed the DB on and then a server that was always online to make sure each device had the latest version.
I have an iPhone now and Möbius Sync does not work as well (I think iOS limits background activity). My solution was to access access my DB via ssh (Strongbox has an option for this, Strongbox is KeepassXC but for Apple).
but i am dreading syncing the database between my phone and my PC.
Fair, but many of us here have a homelab to help with that. Once I had my next cloud running getting other things going was easy.
Controversy? Never.
Sick thing is, you can say the most outrageous shit, and since you have a direct pipeline to billions of people online, you'll always find some fumb ducks to pay you.
Welcome to the post-MLM economy! You don't even influence people, you just say what they want to hear, and they'll influence others for you! Jesus christ.
Very easy. You should be able to export your passwords as .csv and import it into a new manager.
This should help: https://di.day/en/digital-switch-recipes/passwords
You don't capitalize "windows" unless it's the first word in a sentence. You capitalize "Windows" because it's the name of a product. Just like how you capitalize "Apple" because it's the name of a company.
I don’t understand all the hype for Omarchy. It’s not really that groundbreaking or awesome.
Configuring a tiling wm is beyond the skills of most people, and of the people who would be capable of configuring it, only a small minority would bother. So there's some value in bundling all of that into a coherent package.
Things don't have to be groundbreaking for someone to do it the first time.
Well damn, guess I'll be cancelling and switching when my subscription renews. Suggestions for replacement?
Bitwarden
Like $10/year... Stupid cheap for piece of mind and haven't had a data breach yet.
KeePass + Syncthing
Completely local vault in sync with however many endpoints you need
Is that a FOSS thing? Never done that before. Are there decent guides for getting it set up?
It's FOSS and easy to set up. KeePass simply stores everything in a file and you use Syncthing to sync this file between devices. Syncing is optional, if you just need you password on desktop you don't need it.
KeePass has pretty bad UX when compared with Bitwarden though. Bitwarden/Vaulwarden is the best solution IMHO but it's really difficult to set up.
Syncthing is great, but can be a bit of a pain in the ass to set up. I wish they'd make that process easier, and maybe also support sharing the ignore file between the hosts...
Thanks for the overview; I've got some research to do it looks like.
KeePass honestly sucks for the most part. I love local vault and hope something better comes along, but KeePass UI constantly gives me issues. I've tried KeePassXC and that is what I use still, but being limited to opening a single entry at a time. Additional properties are a pain. It's author not even understanding the need for using the desktop session for the CLI (requires passing password via the terminal to or having separate key file). KeeShare not working on Android. So many things that Bitwarden/Vaultwarden solves much better and quicker. Sad that Bitwarden/Vaultwarden didn't make a local SQLite client that doesn't rely on a server.
So that every service I use can have a randomly generated, unique password. Therefore if one of them gets hacked and my password leaked, brute-forced, or decrypted, it won’t affect any other service.
Plus it stores passkeys and handles 2fa code generation, keeping them synced on all my devices, and ensures I never have to remember specific passwords because they’re all safely stored in heavily encrypted vaults guarded by the only single password I do have to remember. Also it notifies me if any of my information is in any breaches, or if I could do better to secure my account.
Trust me when I say, it’s safer, simpler, and smoother way to manage things.
Unique passwords and MFA in the one package. Cross platform so I can use on phone and PC. Costs like $10/year. Also locks the credential and passkey to set URLs so phishing attacks are harder.
It's so that you can have unique, randomized, rotating passwords for every service you have. Also, they auto fill fields for you, and can save you from spoofed URLs if you're not paying attention. Highly recommend getting one. Bitwarden is good.
I never expected a mid hyprland preconfig to be tied to a person with Nazi views and cause this much issues.
I know about omarchy and seen that guy interviewed a couple of times. How the fuck am I just now aware he is a nazi? He seemed egotistical for sure, and his contribution to open source is .. basically his personal dotfiles? I think that this shit was still completely devoid of extermination of minorities manifestos and hatespeech. But seriously how do you know if someone wants to kill refugees? why doesn't he say so in the interviews or in the source code so we can know? This is fucked up. A faschist idea would be to keep a list. But omg, if you want to exterminate children that fled from war, please just say so in your dotfiles! Idk why this bothers me so.. I really do care if my config was made by a hateful hand even if it doesn't show
It's like one of the founders of Mullvad VPN (very very rich OG Swedish hacker from way back when) came out as supporting a serious right wing nationalist party in Sweden a couple months back, he paid them like $500K to make sure they stayed in politics and won.
They are the best VPN, but I'm not coming back once my subscription expires.
What is even happening? Are we seeing something like a return to lead poisoning, but there some chemical in our environment that's rotting people's brains the same way but we don't know about it just like we didn't know about lead at first?
It's the corrosive force of capital
We have too many people gaining power divorced from consequences
My mullvad account has only 15 days left, but i already switch to windscribe vpn. Did my research so far so good... https://kumu.io/...
All right windscribe.
Thing is with Mullvad is that I know for a fact that they don't keep logs. The cops raided their place twice and they learned after that that there's no point. They let them in and do whatever they wanted- they knew they wouldn't find anything.
That type of trust is hard to come by.
Fuck nazis man, they infect the best of us. Such a copout. I suppose it's something about... They get sentimental in their old years and remember a country that is no longer there- I feel that shit too, but I don't get caught up in nationalist cosplay and LARP parties about it, shit changes, we need to fight for it without being fucking nazis. There's a middle road here I feel.
Sorry, I just got rambling, didn't mean to, but damn.
Did they finally boot him off the project? Or is most of the rails community still ignoring the problem?
When/how/why did DHH fall off so bad? There was a time when he was (at least vocally) shitting on Jeff Bezos, Chamath, and a few other "friends"
Probably around the time he started writing blog posts about how there’s too many brown people in London, or comparing Romani to invasive predator species?
Being against a few horrible people doesn’t automatically make you a good guy…
Not suggesting he was automatically a good guy just because of that. But there's a video podcast where he spoke to Jason Calacanis about how the older you get the more socialist you get, the dangers of Facebook, a responsibility for societies to create citizens and not just workers, the need for healthcare, education, and order social programs, etc.
It was all very level headed and reasonable, and he honestly looked incredible. Now he looks nothing like it.
The podcast is This Week in Startups and they have an archive. Highly recommend you check out this specific episode so you can see the stark contrast.
Damnit. I just found out about Omarchy and was thinking about trying it out. Not anymore.
Cachyos will forever be the ideal Arch distro for nerds who want the benefits of Arch without the hassle of Arch (until they support some giant racist or soemthing)
He got a recent interview with one of the YouTubers I follow and I'm must say I'm a bit sad to not see people calling him out https://youtu.be/_CuibYl_Fh0?is=f6p3aQv4iPmdqiH1
It was probably a condition of the interview. :(
I think proton dodged a bullet as the comment of the CEO was only not okay, but not like super bad. But if you funnel 300k to a openly racist idiot, that’s super bad. Same with Mullvad. As soon as money flows, you are immediately batshit crazy.
That's right. But are you suggesting we just sweep it under the rug and ignore the support of racist people? Because that is what big tech does and not a lot of people like it
DHH is bell end, maybe a good developer, but a bad human being. And there are other distros out there.
morals should stay out of software,the ability to use the software to do anything is one of the benefits of open source licenses even if the creator doesn't approve of using it to bombpesky former land occupiers.
Ideally, yes, and I would never promote banning Nazis from posting their code. In practice, however, it is usually less bother to go with a creator following an ideology not historically prone to slipping nasty surprises into their products.
Sure, those nasty surprises will be found, it's the entire point of FOSS, but it always takes time.
... Can we not just write shit down?
I don't understand the need for this password keeper shit outside of a work/corporate environment.
Edit: the concept of writing really pissed you nerds off...
I have more than 300 logins. My password manager handles passkeys, 2FA and has integretad alias creation.
At some point you just can't compare.
That feels excessive and I genuinely think y'all are paranoid about how often people are trying to hack you. Been running the same few for like a decade with no issues. Now I have a relatively low online footprint but still, the tech world in general is starting to feel like a form of psychosis.
The hard password you think of are actually very low entropy and easy to crack, the only good ones are random ones, which are hard to remember (except for the random words ones). It's impossible to remember 200+ totally random password for a regular human
That's why you write them down.
Yes and the password managers automate it such that you don't have to write 20+ long random characters multiple times a day
I do write stuff down. In my password manager so it's always with me all the time and is much more difficult to gain access to than if I were carrying around a notepad. Also, I ain't got pockets for that, and I'm not buying a wardrobe of cargo pants.
Write that shit down.
Ok Grandma and her password book.
The point:
Application unique passwords and MFA in the one package. Cross platform so I can use on phone and PC. Costs like $10/year. Also locks the credential and passkey to set URLs so phishing attacks are harder.
A fucking notebook you keep with password info at home? Like what is confusing about that.
I can see why the left is so messed up now.
I don't use password managers and I've never been exposed.
If your password is 16 characters with a letter, number, symbol, and is more than 1 word it will take millions of years to brute force. Just use multiple passwords and change the important ones every few months in case of data breach and you're golden.
Forgot your password? If you have access to an email with multiple 2-factor you can recover any account in about a minute.
Then you forgot the whole point of password managers which is having a place to store all your credentials, what you said are not reasons to not use a password manager but rather some good practices that you can use alongside a password manager lol
Having all of your credentials stored sounds like a detriment and a pointless amount of trust for a shady group like 1Password who conspire with literal fascists.
I literally never talked about 1password, they aren't the only password managers nor you need a password manager on the cloud (look at KeePassXC), I currently use Bitwarden because i need to be able to sync the password on multiple devices but in the light of what they are doing, I probably need to start hosting a Vaultwarden instance...
This is why I've not used one. The whole point of passwords is privacy, yet people put them all in one place controlled by someone else where you have no way to verify how secure they actually are. And you need a password to get into it, so now there's one password that could be breached to gain access to everything.
You could probably use a local password file like Keepass.
Local password managers exist too, look at KeePassXC
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
Why does this shit distro deserve all this funding and support? There's many better options doing a lot more for the ecosystem yet this gets the attention. It's don't understand.
save