Re: [dev] securiy guidance

2018-03-05 Thread Thomas Levine
Dashamir corrected some errors in my prior message. I have forwarded his corrections, as he is not on this mailing list. --- Forwarded Message Date:Tue, 06 Mar 2018 03:53:31 +0100 From:Dashamir Hoxha To: Thomas Levine <_...@thomaslevine.com> cc: dev mail list , pet...@riseu

Re: [dev] securiy guidance

2018-03-05 Thread Thomas Levine
If you copy (vendor) an encryption/decryption algorithm into your source code, then you are relying on more than libc. So perhaps you could expand your dependencies to libraries with acceptable licensing or to libraries that are widely available. For example, OpenBSD 6.2 provides blowfish. Also, Gn

Re: [dev] securiy guidance

2018-03-05 Thread petern
On 2018-03-05 15:15, Kart Etlinger wrote: > Well, all those problems can be solved by pass-tomb addon, but it uses > zsh, which may be some problem for people who dislike zsh as coding > language. > So yes, the entire password store should be kept in one encrypted file > and so it can be opened and

Re: [dev] [quark] child should kill itself.

2018-03-05 Thread Silvan Jegen
On Mon, Mar 5, 2018 at 1:23 PM, Laslo Hunhold wrote: > On Fri, 23 Feb 2018 15:35:39 -0300 > Draco Metallium(Rodrigo S. CaƱibano) wrote: > > Hey Draco, > >> I have another issue with QUARK, but this time is more performance >> focus. >> >> Currently, after responding to a request, the child proces

Re: [dev] securiy guidance

2018-03-05 Thread Kart Etlinger
Well, all those problems can be solved by pass-tomb addon, but it uses zsh, which may be some problem for people who dislike zsh as coding language. So yes, the entire password store should be kept in one encrypted file and so it can be opened and closed. On 03/05/2018 12:16 PM, Truls Becken wrote

Re: [dev] [quark] child should kill itself.

2018-03-05 Thread Laslo Hunhold
On Fri, 23 Feb 2018 15:35:39 -0300 Draco Metallium(Rodrigo S. CaƱibano) wrote: Hey Draco, > I have another issue with QUARK, but this time is more performance > focus. > > Currently, after responding to a request, the child process just loops > and starts serving on the same socket as the paren

Re: [dev] securiy guidance

2018-03-05 Thread Truls Becken
Hi Peter, I know this is not what you asked about, but there is one other thing people dislike about pass; the file hierarchy is in plain text. If you can fix that, you might attract some users. -Truls On Mon, Mar 5, 2018 at 11:06 AM, wrote: > Hello, > > this mail won't be related to any suckl

[dev] securiy guidance

2018-03-05 Thread petern
Hello, this mail won't be related to any suckless projects, I am looking for some guidance/tips. If this isn't a good place for such requests I can take a hint. Since I stumbled upon suckless.org (2-3 weeks) I switched to dwm and st, read the philosophy and many other pages, browsed through some