- WLUG - wlug.mailman3.com

Re: [Wlug] Cross platform password management
by Michael Voorhis Nov. 23, 2014

Nov. 23, 2014

>From SANS newsBites v16n93; relevant (perhaps) to recent discussions. > --Citadel Trojan Now Targeting Password Managers > (November 19 & 20, 2014) > The Citadel Trojan, which in the past has been used to steal bank > account access credentials and was used in targeted attacks against > Middle Eastern petro-chemical companies, has recently been used in > attacks against password managers. The newest version of Citadel now > targets the master passwords for the three most widely used password > management systems. > http://www.darkreading.com/operations/identity-and-access-management/new-ci… > http://arstechnica.com/security/2014/11/citadel-attackers-aim-to-steal-vict… > [Editor's Note (Honan0: If you have not done so already its time to turn > on the two factor authentication features on your account that many of > these password managers offer.]

1 0

Re: [Wlug] Cross platform password management
by JeffA Maillists Nov. 17, 2014

Nov. 17, 2014

KeePass is awesome... ;-) On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for > suggestions on what apps people are using. My ideal system would have at > least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* > via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. > Thanks all! > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

3 2

Re: [Wlug] Cross platform password management
by Joel Nov. 17, 2014

Nov. 17, 2014

Security questions aside, for synchronization of Android files to Google Drive I like "Autsync for Google Drive" from metactrl. Was $3 to buy & install. Set & forget delta sync of pictures, pdf files, etc. I tell it to only sync every 4 hours via WIFI. Taking a picture toggles a sync now. Thank you, Joel On November 16, 2014 12:53:38 AM Randall Mason <clashthebunny(a)gmail.com> wrote: I use password store (http://www.passwordstore.org/) It's the only true Unix solution. It's written in bash, stores passwords in a gpg encrypted text file, and sync is done with git. It's in most repos and homebrew. It includes niceties such as password generation and versioning is nice too (I used my old password for Facebook on Reddit, but forgot to write it down, but now I've changed my Facebook password becomes a simple git log/checkout). If anything ever happens, everything is stored in a format you can easily grok. I have a private repo on my home NAS that I can get to from anywhere. I have a chroot on android; all of those utilities exist natively on Win/Mac/Linux. Because I trust gpg enough, I could even use a free private repo on bitbucket. Just transfer your password encryption subkey around safely. There are various clients/guis out there including supposedly iOS and Firefox. It wouldn't be hard to write one for Android given all the pieces exist separately in open source forms. On Nov 16, 2014 4:58 AM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > > Nice! The last time I looked, there were some issues with just dumping the > database file on Google drive, so it sounds like they've made some progress > since then. I'll check it out. > > Frank Sweetser fs at wpi.edu | For every problem, there is a solution > that > Manager of Network Operations | is simple, elegant, and wrong. > Worcester Polytechnic Institute | - HL Mencken > > On 11/15/2014 9:05 PM, Richard Klein wrote: > > Frank, > > You just save your .kdb (or is it .kdbx?) file on Google Drive. > It's just > > a file that you open and save from KeePass, so KeePass doesn't have to > support > > Google Drive per se. > > > > I used KeePass for a while, but I prefer LastPass. You said you > didn't > > want an app-specific cloud solution, so I guess that rules out LastPass, > but > > it's what I like. I also pay something like $12/year to LastPass, but > it's > > worth it. > > > > On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Any suggestion for any of the android app variants/clones to try? The > > couple that I looked at only claim Dropbox support, not google drive. > > > > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists > > <jeffa.maillists(a)gmail.com <mailto:jeffa.maillists@gmail.com>> > wrote: > > > > KeePass is awesome... ;-) > > > > On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Hey all, > > > > I'm looking to overhaul my password management, so I'm > looking for > > suggestions on what apps people are using. My ideal system > would > > have at least these features: > > > > - cross platform on windows, Linux, and android > > - synchronize via 3rd party cloud storage, preferably google > drive > > - *not* via an app specific service > > - good Firefox plugin > > > > Any suggestions on what to try, or to avoid, would be greatly > > appreciated. Thanks all! > > -- > > Sent from my Android device with K-9 Mail. Please excuse my > brevity. > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > ------------------------------------------------------------------------------ > > > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > -- > > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > ---------- _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Cross platform password management
by Randall Mason Nov. 16, 2014

Nov. 16, 2014

I use password store (http://www.passwordstore.org/) It's the only true Unix solution. It's written in bash, stores passwords in a gpg encrypted text file, and sync is done with git. It's in most repos and homebrew. It includes niceties such as password generation and versioning is nice too (I used my old password for Facebook on Reddit, but forgot to write it down, but now I've changed my Facebook password becomes a simple git log/checkout). If anything ever happens, everything is stored in a format you can easily grok. I have a private repo on my home NAS that I can get to from anywhere. I have a chroot on android; all of those utilities exist natively on Win/Mac/Linux. Because I trust gpg enough, I could even use a free private repo on bitbucket. Just transfer your password encryption subkey around safely. There are various clients/guis out there including supposedly iOS and Firefox. It wouldn't be hard to write one for Android given all the pieces exist separately in open source forms. On Nov 16, 2014 4:58 AM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > > Nice! The last time I looked, there were some issues with just dumping the > database file on Google drive, so it sounds like they've made some progress > since then. I'll check it out. > > Frank Sweetser fs at wpi.edu | For every problem, there is a solution > that > Manager of Network Operations | is simple, elegant, and wrong. > Worcester Polytechnic Institute | - HL Mencken > > On 11/15/2014 9:05 PM, Richard Klein wrote: > > Frank, > > You just save your .kdb (or is it .kdbx?) file on Google Drive. > It's just > > a file that you open and save from KeePass, so KeePass doesn't have to > support > > Google Drive per se. > > > > I used KeePass for a while, but I prefer LastPass. You said you > didn't > > want an app-specific cloud solution, so I guess that rules out LastPass, > but > > it's what I like. I also pay something like $12/year to LastPass, but > it's > > worth it. > > > > On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Any suggestion for any of the android app variants/clones to try? The > > couple that I looked at only claim Dropbox support, not google drive. > > > > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists > > <jeffa.maillists(a)gmail.com <mailto:jeffa.maillists@gmail.com>> > wrote: > > > > KeePass is awesome... ;-) > > > > On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu > > <mailto:fs@wpi.edu>> wrote: > > > > Hey all, > > > > I'm looking to overhaul my password management, so I'm > looking for > > suggestions on what apps people are using. My ideal system > would > > have at least these features: > > > > - cross platform on windows, Linux, and android > > - synchronize via 3rd party cloud storage, preferably google > drive > > - *not* via an app specific service > > - good Firefox plugin > > > > Any suggestions on what to try, or to avoid, would be greatly > > appreciated. Thanks all! > > -- > > Sent from my Android device with K-9 Mail. Please excuse my > brevity. > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > ------------------------------------------------------------------------------ > > > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > -- > > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org <mailto:Wlug@mail.wlug.org> > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

1 0

Re: [Wlug] Cross platform password management
by Richard Klein Nov. 16, 2014

Nov. 16, 2014

Frank, You just save your .kdb (or is it .kdbx?) file on Google Drive. It's just a file that you open and save from KeePass, so KeePass doesn't have to support Google Drive per se. I used KeePass for a while, but I prefer LastPass. You said you didn't want an app-specific cloud solution, so I guess that rules out LastPass, but it's what I like. I also pay something like $12/year to LastPass, but it's worth it. On Sat, Nov 15, 2014 at 6:28 PM, Frank Sweetser <fs(a)wpi.edu> wrote: > Any suggestion for any of the android app variants/clones to try? The > couple that I looked at only claim Dropbox support, not google drive. > > > On November 15, 2014 6:25:58 PM EST, JeffA Maillists < > jeffa.maillists(a)gmail.com> wrote: >> >> KeePass is awesome... ;-) >> On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: >> >>> Hey all, >>> >>> I'm looking to overhaul my password management, so I'm looking for >>> suggestions on what apps people are using. My ideal system would have at >>> least these features: >>> >>> - cross platform on windows, Linux, and android >>> - synchronize via 3rd party cloud storage, preferably google drive - >>> *not* via an app specific service >>> - good Firefox plugin >>> >>> Any suggestions on what to try, or to avoid, would be greatly >>> appreciated. Thanks all! >>> -- >>> Sent from my Android device with K-9 Mail. Please excuse my brevity. >>> _______________________________________________ >>> Wlug mailing list >>> Wlug(a)mail.wlug.org >>> http://mail.wlug.org/mailman/listinfo/wlug >>> >>> ------------------------------ >> >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug >> >> > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

2 1

Re: [Wlug] Cross platform password management
by thinkbrown＠gmail.com Nov. 16, 2014

Nov. 16, 2014

A text file in a TrueCrypt container? Logan On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs(a)wpi.edu> wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for > suggestions on what apps people are using. My ideal system would have at > least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* > via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. > Thanks all! > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

3 2

Re: [Wlug] Cross platform password management
by Chuck Anderson Nov. 16, 2014

Nov. 16, 2014

I like keepassx because there is a CLI "shell" client I'm using called kpcli. I use both the GUI and CLI in different scenarios. I have the Android client as well, but don't really use it. Instead I SSH in and use kpcli. I prefer to keep my data local (not in the cloud), especially sensitive data like password databases. On Sat, Nov 15, 2014 at 06:21:32PM -0500, Frank Sweetser wrote: > Hey all, > > I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features: > > - cross platform on windows, Linux, and android > - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service > - good Firefox plugin > > Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all!

1 0

Re: [Wlug] Cross platform password management
by Higgins, Benjamin John Nov. 15, 2014

Nov. 15, 2014

Keepass for the win -- Benjamin J. Higgins (‘97), JNCIA-Junos WPI Network Operations Please excuse my brevity - sending from a cell phone. On Nov 15, 2014 6:21 PM, Frank Sweetser <fs(a)WPI.EDU> wrote: > > Hey all, > > I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are Hey all, I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features: - cross platform on windows, Linux, and android - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service - good Firefox plugin Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all! -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

1 0

Cross platform password management
by Frank Sweetser Nov. 15, 2014

Nov. 15, 2014

Hey all, I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features: - cross platform on windows, Linux, and android - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service - good Firefox plugin Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all! -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

1 0

Great meeting last night!
by Tim Keller Nov. 14, 2014

Nov. 14, 2014

Hey Everybody! Last night we had a great meeting. Logan did a kick ass job on the Asterisks talk! Asterisks is cool than I thought and we all learned quite a bit. For those who were unable to attend, we had a surprise guest! Maddog showed up and brought along a "Banana Pi" and a "Adapteva Parallela". He also offered in the future to speak about the projects that he's currently working on. I was going to speak next month on STEM/Linux software/toys but I'm going to instead step aside for Maddog if it all works out. Also, we're going to work on getting the guy who runs Adapteva to come do a talk about the Parallela platform and his manycore architecture, etc. Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0