Update
This post originally was about this article: 1Password Supports the Ethnic Cleansing of Europe — Andrew Lilley Brinker
It has been updated with an article from a more reputable news organisation.
1 Like
Please do not editorialize titles of blog posts/articles.
This is not a news article, its a blog post. Tag is mislabelled too.
2 Likes
please stop with the #FakeNews
We have one goal togehter: more FLOSS Alternatives!
If you are a Rustacean working at 1Password, please raise hell within the company about how unacceptable this is.
Can someone explain what Rust has to do with this? Is this like a call to the Rust community?
1 Like
Folks, keep in mind that this a different beast than Mullvad’s co-owner donating to a political party with a similar agenda.
1Password’s donation is probably directed toward the Omarchy project itself (although the donation goes to the recently established Omacom Foundation first, if I understand correctly), while Berntsson donated to an immediate cause, i.e. a political party.
1Password could have not considered Heinemeier-Hansson’s political stance (his linked blog posts really are problematic, narrow-minded and also bend the truth), but the foundations goal is not a cleansing as it might be for Sweden’s Örebro party.
That being said, this still associates 1Password with Heinemeier-Hansson’s view for me personally now, even if it happened unknowingly.
And I despise this bigoted political view.
2 Likes
Of course pretty sad about the route that 1Password choose to follow and there are no excuses for me that they don’t know where they donate the $300,000.
Another recommended paying service is using our money for “controversial” donations.
Maybe the site needs to add a small controversy note in services like Mullvad VPN, 1Password etc, so new people who are looking to buy or subscribe to these services are better informed?
2 Likes
People really seem to love the anti-immigration kool-aide. I don’t really hold this against 1Password—it is quite different from what happened with Mullvad.
2 Likes
I don’t believe a companies/owners/employees political stance or donations have anything to do with “Privacy” and I don’t believe PG should get involved in a companies politics. It just wouldn’t be a good thing for PG to do
3 Likes
Whether or not some are offended by the political implications of the donation, I think we can all come together across ideological lines and be offended that somebody looked at Omarchy and said, “Yes, this is where $300,000 should go.”
9 Likes
Something I have noticed, and find rather sus, is the money being given to Omarchy - which is about $13 million. For what? A riced-up Arch Linux? Just because the guy behind it has his own Wikipedia page? Someone better tell /r/unixporn they could all become really wealthy.
Like most Arch Linux derivatives, they have poor practices, such as encouraging users to rely on Chaotic-AUR, which is a massive supply chain risk, or maintaining separate repositories with hugely outdated packages and a spaghetti of shitty shell scripts. I think one example brought up in chat was the massively outdated Chromium they were shipping (which is known for exploits being used in the wild when they become public). 
And if you’re not convinced, it even came with its own exposed Docker socket. Before anyone says “but they fixed that,” it should never have been a thing that needed fixing in the first place. Docker socket proxies have existed for a long time.
A much better way of doing it would have been simply an ostree image with a the few changes he required on top of that (like what Secureblue does) which is a much better distribution for developers with a lot less risk due their build architecture and auditing.
If 1Password developers seriously use Omarchy it would be enough reason for me not to use 1Password due to supply chain risks.
10 Likes
I believe everything is political, in the sense that any of our choices is influenced, to some extent at least, by our culture, group mentality and inherited assumptions.
Political stances of software developers or vendors is of critical importance because it says a lot on what might be expected from them in the future, in particular about their products’ governance.
Endorsing fascist views (even involuntarily) necessarily leads, one day or another, to promote (or even help) mass surveillance.
I think no trust can be granted to someone vending software and having fascist views. Even if, at first, they want to promote anonymity and confidentiality in line with libertarian views, to ensure they and their fellows can escape what they regard as unfair censorship, the seeds of intolerance and control is at their core and will grow to invasive surveillance deeds to ensure control against what they will inevitably call “the enemy from within”.
6 Likes
I am also very, very confused about the hype around what I have perceived to be like … a customized Arch Linux. Which… is every “I use Arch btw” person’s desktop. It’s like the entire purpose of Arch.
1 Like
Yeah except you can’t say “btw i use Arch” if you’re using some frankenstein arch distro with old packages. When you consider Omarchy’s fork of chromium was literally for theming it’s kind of hilarious and gives you no confidence in the project. Again, before anyone says “but they don’t do that anymore”, they should have never done it in the first place.
1 Like
The story is making the news already https://www.theverge.com/tech/988536/1password-dhh-linux-controversy
Can you upgrade my OP or only downgrades allowed?
Done
1 Like
From what I understand, it’s also largely vibecoded, which I assume is part of the reason there’s seemingly an unending flow of security issues. It includes a bunch of AI-centric stuff, effectively encouraging users to vibecode their configurations and so on as well.
Even ignoring DHH’s personal opinions, that 1Password thinks Omarchy is worthy of support despite being a collection of shitty vibecoded shell scripts and outdated packages with the security properties of Swiss cheese is enough for me to dismiss them and their products outright.
TBH I think pretty much everyone in their donor list is untrustworthy. It’s also amusing that 1Password is now the only corporate sponsor other than 37signals, which DHH co-owns.