- WLUG - wlug.mailman3.com

Reminder: Meeting Wednesday Dec 10th @7pm (rm 331) mid-century room.
by Tim Keller Dec. 10, 2014

Dec. 10, 2014

Hey Everybody, There's a meeting scheduled for Wednesday at 7pm rm 331. Be there or get your geek cards revoked! I know there's inclement weather predicted for Tuesday, so it should be all clear by Wednesday night. However if things change and it looks like the roads will be a mess, we'll reassess. Unless the plans change, Jon "maddog" Hall will be giving a talk! Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

6 12

Reminder: Meeting Thursday December 11th @7pm (rm 331) mid-century room
by Tim Keller Dec. 8, 2014

Dec. 8, 2014

Hey Everybody, I erroneously sent out email with the wrong date... The meeting is Thursday, December 11th @7pm in the usual place. Sorry for the confusion. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Meeting reminder! December 11th! Jon "Maddog" Hall!
by Tim Keller Dec. 1, 2014

Dec. 1, 2014

Hey Everybody, Just a reminder that we've got a meeting on December 11th. The planned speaker is going to be John "Maddog" Hall. I *believe* he'll be speaking about the "Linaro" project among other things. Like usual, refreshments and snacks will be provided. The meeting will take place in the Mid-Century room (rm. 331) starting at 7pm. Afterwards we'll gorge ourselves on pizza. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] Cross platform password management
by Michael Voorhis Nov. 23, 2014

Nov. 23, 2014

>From SANS newsBites v16n93; relevant (perhaps) to recent discussions. > --Citadel Trojan Now Targeting Password Managers > (November 19 & 20, 2014) > The Citadel Trojan, which in the past has been used to steal bank > account access credentials and was used in targeted attacks against > Middle Eastern petro-chemical companies, has recently been used in > attacks against password managers. The newest version of Citadel now > targets the master passwords for the three most widely used password > management systems. > http://www.darkreading.com/operations/identity-and-access-management/new-ci… > http://arstechnica.com/security/2014/11/citadel-attackers-aim-to-steal-vict… > [Editor's Note (Honan0: If you have not done so already its time to turn > on the two factor authentication features on your account that many of > these password managers offer.]

1 0

Re: [Wlug] Cross platform password management
by JeffA Maillists Nov. 17, 2014

Nov. 17, 2014

KeePass is awesome... ;-) On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for > suggestions on what apps people are using. My ideal system would have at > least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* > via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. > Thanks all! > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

3 2

Re: [Wlug] Cross platform password management
by Joel Nov. 17, 2014

Nov. 17, 2014

Security questions aside, for synchronization of Android files to Google Drive I like "Autsync for Google Drive" from metactrl. Was $3 to buy & install. Set & forget delta sync of pictures, pdf files, etc. I tell it to only sync every 4 hours via WIFI. Taking a picture toggles a sync now. Thank you, Joel On November 16, 2014 12:53:38 AM Randall Mason <clashthebunny(a)gmail.com> wrote: I use password store (http://www.passwordstore.org/) It's the only true Unix solution. It's written in bash, stores passwords in a gpg encrypted text file, and sync is done with git. It's in most repos and homebrew. It includes niceties such as password generation and versioning is nice too (I used my old password for Facebook on Reddit, but forgot to write it down, but now I've changed my Facebook password becomes a simple git log/checkout). If anything ever happens, everything is stored in a format you can easily grok. I have a private repo on my home NAS that I can get to from anywhere. I have a chroot on android; all of those utilities exist natively on Win/Mac/Linux. Because I trust gpg enough, I could even use a free private repo on bitbucket. Just transfer your password encryption subkey around safely. There are various clients/guis out there including supposedly iOS and Firefox. It wouldn't be hard to write one for Android given all the pieces exist separately in open source forms. On Nov 16, 2014 4:58 AM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > > Nice! The last time I looked, there were some issues with just dumping the > database file on Google drive, so it sounds like they've made some progress > since then. I'll check it out. > > Frank Sweetser fs at wpi.edu | For every problem, there is a solution > that > Manager of Network Operations | is simple, elegant, and wrong. > Worcester Polytechnic Institute | - HL Mencken > > On 11/15/2014 9:05 PM, Richard Klein wrote: > > Frank, > > You just save your .kdb (or is it .kdbx?) file on Google Drive. > It's just > > a file that you open and save from KeePass, so KeePass doesn't have to > support > > Google Drive per se. > > > > I used KeePass for a while, but I prefer LastPass. You said you > didn't > > want an app-specific cloud solution, so I guess that rules out LastPass, > but > > it's what I like. I also pay something like $12/year to LastPass, but > it's > > worth it. > > > > On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Any suggestion for any of the android app variants/clones to try? The > > couple that I looked at only claim Dropbox support, not google drive. > > > > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists > > <jeffa.maillists(a)gmail.com <mailto:jeffa.maillists@gmail.com>> > wrote: > > > > KeePass is awesome... ;-) > > > > On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Hey all, > > > > I'm looking to overhaul my password management, so I'm > looking for > > suggestions on what apps people are using. My ideal system > would > > have at least these features: > > > > - cross platform on windows, Linux, and android > > - synchronize via 3rd party cloud storage, preferably google > drive > > - *not* via an app specific service > > - good Firefox plugin > > > > Any suggestions on what to try, or to avoid, would be greatly > > appreciated. Thanks all! > > -- > > Sent from my Android device with K-9 Mail. Please excuse my > brevity. > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > ------------------------------------------------------------------------------ > > > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > -- > > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > ---------- _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Cross platform password management
by Randall Mason Nov. 16, 2014

Nov. 16, 2014

I use password store (http://www.passwordstore.org/) It's the only true Unix solution. It's written in bash, stores passwords in a gpg encrypted text file, and sync is done with git. It's in most repos and homebrew. It includes niceties such as password generation and versioning is nice too (I used my old password for Facebook on Reddit, but forgot to write it down, but now I've changed my Facebook password becomes a simple git log/checkout). If anything ever happens, everything is stored in a format you can easily grok. I have a private repo on my home NAS that I can get to from anywhere. I have a chroot on android; all of those utilities exist natively on Win/Mac/Linux. Because I trust gpg enough, I could even use a free private repo on bitbucket. Just transfer your password encryption subkey around safely. There are various clients/guis out there including supposedly iOS and Firefox. It wouldn't be hard to write one for Android given all the pieces exist separately in open source forms. On Nov 16, 2014 4:58 AM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > > Nice! The last time I looked, there were some issues with just dumping the > database file on Google drive, so it sounds like they've made some progress > since then. I'll check it out. > > Frank Sweetser fs at wpi.edu | For every problem, there is a solution > that > Manager of Network Operations | is simple, elegant, and wrong. > Worcester Polytechnic Institute | - HL Mencken > > On 11/15/2014 9:05 PM, Richard Klein wrote: > > Frank, > > You just save your .kdb (or is it .kdbx?) file on Google Drive. > It's just > > a file that you open and save from KeePass, so KeePass doesn't have to > support > > Google Drive per se. > > > > I used KeePass for a while, but I prefer LastPass. You said you > didn't > > want an app-specific cloud solution, so I guess that rules out LastPass, > but > > it's what I like. I also pay something like $12/year to LastPass, but > it's > > worth it. > > > > On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Any suggestion for any of the android app variants/clones to try? The > > couple that I looked at only claim Dropbox support, not google drive. > > > > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists > > <jeffa.maillists(a)gmail.com <mailto:jeffa.maillists@gmail.com>> > wrote: > > > > KeePass is awesome... ;-) > > > > On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Hey all, > > > > I'm looking to overhaul my password management, so I'm > looking for > > suggestions on what apps people are using. My ideal system > would > > have at least these features: > > > > - cross platform on windows, Linux, and android > > - synchronize via 3rd party cloud storage, preferably google > drive > > - *not* via an app specific service > > - good Firefox plugin > > > > Any suggestions on what to try, or to avoid, would be greatly > > appreciated. Thanks all! > > -- > > Sent from my Android device with K-9 Mail. Please excuse my > brevity. > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > ------------------------------------------------------------------------------ > > > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > -- > > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

1 0

Re: [Wlug] Cross platform password management
by Richard Klein Nov. 16, 2014

Nov. 16, 2014

Frank, You just save your .kdb (or is it .kdbx?) file on Google Drive. It's just a file that you open and save from KeePass, so KeePass doesn't have to support Google Drive per se. I used KeePass for a while, but I prefer LastPass. You said you didn't want an app-specific cloud solution, so I guess that rules out LastPass, but it's what I like. I also pay something like $12/year to LastPass, but it's worth it. On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu> wrote: > Any suggestion for any of the android app variants/clones to try? The > couple that I looked at only claim Dropbox support, not google drive. > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists < > jeffa.maillists(a)gmail.com> wrote: >> >> KeePass is awesome... ;-) >> On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: >> >>> Hey all, >>> >>> I'm looking to overhaul my password management, so I'm looking for >>> suggestions on what apps people are using. My ideal system would have at >>> least these features: >>> >>> - cross platform on windows, Linux, and android >>> - synchronize via 3rd party cloud storage, preferably google drive - >>> *not* via an app specific service >>> - good Firefox plugin >>> >>> Any suggestions on what to try, or to avoid, would be greatly >>> appreciated. Thanks all! >>> -- >>> Sent from my Android device with K-9 Mail. Please excuse my brevity. >>> _______________________________________________ >>> Wlug mailing list >>> Wlug(a)mail.wlug.org >>> http://mail.wlug.org/mailman/listinfo/wlug >>> >>> ------------------------------ >> >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug >> >> > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

2 1

Re: [Wlug] Cross platform password management
by thinkbrown＠gmail.com Nov. 16, 2014

Nov. 16, 2014

A text file in a TrueCrypt container? Logan On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for > suggestions on what apps people are using. My ideal system would have at > least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* > via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. > Thanks all! > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

3 2

Re: [Wlug] Cross platform password management
by Chuck Anderson Nov. 16, 2014

Nov. 16, 2014

I like keepassx because there is a CLI "shell" client I'm using called kpcli. I use both the GUI and CLI in different scenarios. I have the Android client as well, but don't really use it. Instead I SSH in and use kpcli. I prefer to keep my data local (not in the cloud), especially sensitive data like password databases. On Sat, Nov 15, 2014 at 06:21:32PM -0500, Frank Sweetser wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all!

1 0