Re: [dev] suckless password manager

2009-12-11 Thread Dieter Plaetinck
FYI recently the fd.o guys started working on a "secrets storage spec" http://www.freedesktop.org/wiki/Specifications/secret-storage-spec i find it quite interesting because they want to have a spec that multiple applications will start using. If you want to help steering them to be compatible wit

Re: [dev] suckless password manager

2009-12-11 Thread Andreas Neustifter
passwordmaker.org On 10.12.2009, at 23:07, anonymous wrote: Currently I have only found one simple password manager: pwsafe. It can be used from command line, can work with X clipboard and uses good cryptography I think. But it is not supported now and it's code depends on readline, autoto

Re: [dev] suckless password manager

2009-12-10 Thread Uriel
Factotum + secstore: * http://doc.cat-v.org/plan_9/4th_edition/papers/auth * http://man.cat-v.org/p9p/4/factotum * http://man.cat-v.org/p9p/1/secstore On Thu, Dec 10, 2009 at 11:07 PM, anonymous wrote: > Currently I have only found one simple password manager: pwsafe. It can be > used from comm

Re: [dev] suckless password manager

2009-12-10 Thread Antoni Grzymala
Alexander Surma dixit (2009-12-11, 00:07): > Actually, I think passwordmanagers are not secure. All your passwords are > just as strong as your PM encryption. That's why I keep most of my less-used passwords in a GPG-encrypted-to-self file with a vim configuration for transparent decryption, reen

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
> Thanks for the tip :) I updated passman accordingly and now it uses > "shred -fuz" instead of "rm -f". Also if you want to make code shorter you can use [ expr ] && echo true || echo false instead of if..else.

Re: [dev] suckless password manager

2009-12-10 Thread Nibble
Thanks for the tip :) I updated passman accordingly and now it uses "shred -fuz" instead of "rm -f". On Thu, 10 Dec 2009 16:03:35 -0800 Suraj Kurapati wrote: > On Thu, Dec 10, 2009 at 2:14 PM, Nibble wrote: > > It is just a little "toy", but maybe it could be useful for someone > > else ;) > >

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
> You're right, perhaps it's an xsel bug? > Perhaps you could > > echo "password" | xsel -i > sleep 0.5 > xsel -c # or -d? > > Maybe xclip offers more pwsafe clears PRIMARY right after you use it. Then it exits. That way you can use it only one time and you can be sure no one can see you passwor

Re: [dev] suckless password manager

2009-12-10 Thread Nibble
Maybe "xclip -l 1 -i" could do the work. BTW I have just simplified the script even more (using umask instead of chmod's). Last changes are in the hg tip. http://nibble.develsec.org/hg/toys/file/a12b1de0a2cc/passman On Thu, 10 Dec 2009 23:46:31 + Rob wrote: > >What timeout -t affects? Loo

Re: [dev] suckless password manager

2009-12-10 Thread Suraj Kurapati
On Thu, Dec 10, 2009 at 2:14 PM, Nibble wrote: > It is just a little "toy", but maybe it could be useful for someone > else ;) > > http://nibble.develsec.org/hg/toys/file/da45af463c1c/passman I've done a similar toy with VIM + GPG back in the day: :-) http://snk.tuxfamily.org/bin/secure-edit.

Re: [dev] suckless password manager

2009-12-10 Thread Rob
>What timeout -t affects? Looks like nothing changed. For -t 5000 i can >retrieve PRIMARY after 5 seconds, before 5 seconds and at any time. You're right, perhaps it's an xsel bug? Perhaps you could echo "password" | xsel -i sleep 0.5 xsel -c # or -d? Maybe xclip offers more

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
> Actually, I think passwordmanagers are not secure. All your passwords are > just as strong as your PM encryption. > I have an mnemoc/algorithm which enables me to generate a quite strong > password (without pen&paper) which depends on the name of the webpage > and/or username I use there. But w

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
On Thu, Dec 10, 2009 at 11:03:25PM +, Rob wrote: > Perhaps you could alter the script to pipe the nth line into xsel, or change > the format of the 'database' > e.g. > gmail hunter2 > supersecritsight.org 1234 > and prompt the user for a site? (man read, xmessage?) > > > From xsel's man page:

Re: [dev] suckless password manager

2009-12-10 Thread Alexander Surma
Actually, I think passwordmanagers are not secure. All your passwords are just as strong as your PM encryption. I have an mnemoc/algorithm which enables me to generate a quite strong password (without pen&paper) which depends on the name of the webpage and/or username I use there. On Dec 10, 2009

Re: [dev] suckless password manager

2009-12-10 Thread Rob
> It can't work with X, but use of GPG instead of creating new encryption > scheme is interesting. So the only thing to implement is secure use of > X11 clipboard and integration with GPG or some PGP library. Perhaps you could alter the script to pipe the nth line into xsel, or change the format o

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
On Thu, Dec 10, 2009 at 11:14:15PM +0100, Nibble wrote: > Hi, > > It is just a little "toy", but maybe it could be useful for someone > else ;) > > http://nibble.develsec.org/hg/toys/file/da45af463c1c/passman > > Kind regards, > Nibble It can't work with X, but use of GPG instead of creating ne

Re: [dev] suckless password manager

2009-12-10 Thread Nibble
Hi, It is just a little "toy", but maybe it could be useful for someone else ;) http://nibble.develsec.org/hg/toys/file/da45af463c1c/passman Kind regards, Nibble On Fri, 11 Dec 2009 01:07:21 +0300 anonymous wrote: > Currently I have only found one simple password manager: pwsafe. It > can be

Re: [dev] suckless password manager

2009-12-10 Thread anonymous
> Currently I have only found one simple password manager: pwsafe. It can be > used from command line, can work with X clipboard and uses good cryptography > I think. But it is not supported now and it's code depends on readline, > autotools, written in C++ and consists of one .cpp file. As I ca

[dev] suckless password manager

2009-12-10 Thread anonymous
Currently I have only found one simple password manager: pwsafe. It can be used from command line, can work with X clipboard and uses good cryptography I think. But it is not supported now and it's code depends on readline, autotools, written in C++ and consists of one .cpp file. As I can see su