Requesting: Passwordmaker - Page 2 - maemo.org

Active Topics

Is there a section to talk about Java ME? Apps, etc. (6)
to General by Kalatti - 6 days, 6 hrs ago
more...

Page 2 of 3

< Prev

Next >

Thread Tools

	caco3	2011-04-15 , 21:46
	Posts: 560 \| Thanked: 423 times \| Joined on May 2010 @ Switzerland	#11

Hi all

I quickly compiled passwordmaker in my scratchbox.
Please copy it to your phone and check if it works.
You might have to give it first execution rights!
(This is not possible in MyDocs, so I suggest to move it to /opt)

Please let me know if you have to install any additional packages.
I needed the following:
libmhash2 (install it as root with "apt-get install libmhash2")
Also I needed libpcrecpp0. This should actually be preinstalled, but was missing on my phone. There was no package available, so I used the SDK version from http://maemo.org/packages/package_in...6.7-1osso1+r1/

If it works for you, I can pack it for maemo.

Also, I run it, and it asked me for a master password. Is this normal? How would I use it in the command line?
I also will have to know/understand the usage in case I should build a GUI.

Attached Files

passwordmaker 1.5 ARMEL.zip (404.3 KB, 77 views)

__________________
On N9 check out this:
CacheMe 4 the N9, a geocaching client / MiniBible, a bible viewer / TheWord brings daily bible verses onto your phone / BatteryGraph to monitor the battery drainage / doublepress2unlock to unlock your phone with a double press onto the power button / GPRS Data Usage to monitor your GPRS data usage /
and more...

On N900 check out this: SleepAnalyser to analyse your sleep movements / PasswordMaker a for a password generator

Quote & Reply |

The Following User Says Thank You to caco3 For This Useful Post:
danielpublic

danielpublic	2011-04-16 , 10:52
Posts: 54 \| Thanked: 53 times \| Joined on Feb 2010 @ Sweden	#12

To be able to use the executable, I had to:
· Download & extract the attached file, transfer ditto, login and chmod +x passwordmaker;mv passwordmaker /home/opt/
· apt-get install libmhash2
· dpkg -i libpcrecpp0_6.7-1osso1\+r1_armel.deb

Yes, its completely normal! I have not look at the ' -f ' yet, but I'll get back to you shortly on that.
A simple usage case (with deafult values) would be:

Code:

 ./passwordmaker -r talk.maemo.org
Master password: gnomes
JYC)shuv

Where ' -r ' is the equivalent to:
· 'using text' in the Firefox plugin.

· 'url' in the javascript. (N.B. not 'input url')

Now, since one could argue that md5 has these collision vulnerabilities-thingys and it's a bit short for ones comfort levels.
By that, a more normal/sensible/sound (YMMV) usage case would be:

Code:

 ./passwordmaker -m gnomes -r talk.maemo.org -u Mr.Snuggles -g 30 -a SHA256 -x
WARNING: Due to a bug in Javascript based versions, this is wrong;
T2#tULloviCyhn-14fs_y\s4Whu,}t

Then on top of that, as Mr.Snuggles is a tinfoil-hat paranoid person, (s)he also use some of those techniques described in this thread.

And just for sake of “protocol”, the help usage information:

Code:

-f <string>,  --file <string>
     (value required)  Path/filename to a settings file

   --search <string>
     (value required)  Search config file for an account matching the
     supplied URL. If found, that account's settings will be used to
     generate the password. Example: passwordmaker --search
     https://yoursite.com/login.phtml

   -L,  --list
     List all accounts and groups in the config file.

   -b,  --verbose
     Echo command-line arguments

   -0,  --trimzeros
     Trim leading zeros from the generated password

   -x,  --HMAC
     Use the HMAC version of the specified hash algorithm

   -r <string>,  --url <string>
     (value required)  URL (equivalent to "Use This URL" in the
     Firefox/Mozilla extension)

   -a <MD4|MD5|SHA1|SHA256|RIPEMD160>,  --alg <MD4|MD5|SHA1|SHA256
      |RIPEMD160>
     (value required)  Hash Algorithm

   --account_skip <interger>
     (value required)  Account skip

   --account <string>
     (value required)  Account

   -c <string>,  --chars <string>
     (value required)  Characters

   -g <integer>,  --length <integer>
     (value required)  Password Length

   -d <string>,  --modifier <string>
     (value required)  Password Modifier

   -s <string>,  --suffix <string>
     (value required)  Password Suffix

   -p <string>,  --prefix <string>
     (value required)  Password Prefix

   -u <string>,  --username <string>
     (value required)  Username

   -l <none|before|after|both>,  --l33t <none|before|after|both>
     (value required)  Where to use l33t

   -e <1|2|3|4|5|6|7|8|9>,  --level <1|2|3|4|5|6|7|8|9>
     (value required)  l33t level

   -m <string>,  --mpw <string>
     (value required)  Master Password

   --,  --ignore_rest
     Ignores the rest of the labeled arguments following this flag.

   -v,  --version
     Displays version information and exits.

   -h,  --help
     Displays usage information and exits.

Thanks again, for taking your time on this!

__________________
Need a open source, crossplattform, mobile, secure way of generating/managing unique passwords? Check out: passwordmaker + Tips & Tricks !
Test a developing GUI here. Like it? Support it!

As your attorney, I advise you to take those USB flashdrive of yours, that you never use anyway and your fellow mans epoxy, glue the sticks in a some nice public environment and point them out on DD.

Last edited by danielpublic; 2011-04-16 at 11:17. Reason: minor thingy. Ooops, forgot javascript.

Quote & Reply |

	caco3	2011-04-16 , 19:01
	Posts: 560 \| Thanked: 423 times \| Joined on May 2010 @ Switzerland	#13

I do not yet understand why it needs 2 fields for the password? Would one not be enough? the command line tool only uses one.

Also, in the cli example you showed me, why do you need the options (-u Username). Whats the purpose for that?

Also for the URL (-r) I would expect it would be useful to have a drop down list so you do not have to type it in every time.

Last edited by caco3; 2011-04-16 at 19:33.

Quote & Reply |

The Following User Says Thank You to caco3 For This Useful Post:
danielpublic

	casketizer	2011-04-16 , 19:43
	Posts: 566 \| Thanked: 282 times \| Joined on Sep 2010 @ Lower Saxony	#14

passwordmaker's postinstall uses gnu's ln syntax not busybox's

Code:

Setting up passwordmaker (1.5-maemo1) ...
ln: unrecognized option `--symbolic'
BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso30+0m5) multi-call binary

Usage: ln [OPTION] TARGET... LINK_NAME|DIRECTORY

dpkg: error processing passwordmaker (--configure):
 subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
 passwordmaker
E: Sub-process /usr/bin/dpkg returned an error code (1)

just use
ln -s

Last edited by casketizer; 2011-04-16 at 19:51.

Quote & Reply |

	caco3	2011-04-16 , 20:10
	Posts: 560 \| Thanked: 423 times \| Joined on May 2010 @ Switzerland	#15

thanks, I just uploaded a fixed version.
Also a GUI will follow soon!

Quote & Reply |

The Following 2 Users Say Thank You to caco3 For This Useful Post:
casketizer, danielpublic

danielpublic	2011-04-16 , 20:46
Posts: 54 \| Thanked: 53 times \| Joined on Feb 2010 @ Sweden	#16

No, you are right. It's just a waste of space.

The -u option is useful for sites were one has more than one account.
For example user@maildomain & user@hostname and so on.
Account are also very useful since not all sites accept all characters or say for that "pin/digit"-padlock up in my storage space in the attic. I have no clue what that 4 digit pin is, however I know what it protects and by that I can regenerate the password whenever, even twenty years from now!

Also of course, its important that all versions are consistent with each other.

A dropdown history would be really nice, both for usernames and urls!

However, a dropdown history should not be enabled by default, since that could be considered as a security risk and only displayed if all settings and masterpassword is correct! Then all is not lost even when the master password is compromised!

A reconsidered GUI-suggestion could be something like this:

Application menu: Accounts - Help - About.

Master password: [xxxxxx]
Menu: [optionpulldown list]
Value: [displayed depending on option chosen above ]
Input field: [yyyyyyyyyy]
Generated password: [zzzzzzzzzzzzz]
---[Copy to Clipboard]---

Quote & Reply |

	caco3	2011-04-16 , 22:41
	Posts: 560 \| Thanked: 423 times \| Joined on May 2010 @ Switzerland	#17

All right
I now uploaded a first version of the GUI.
(0.1-5 shuld have the missing hildon integration.
Else start it with
python /opt/passwordmaker/frontend/main.py )

Also the cli version works now.

Happy testing

Quote & Reply |

The Following 2 Users Say Thank You to caco3 For This Useful Post:
casketizer, danielpublic

danielpublic	2011-04-17 , 16:39
Posts: 54 \| Thanked: 53 times \| Joined on Feb 2010 @ Sweden	#18

Seems it works fine!

Installing 0.1-9 & 1.5-maemo3 as I type!

[emailed error log]

Last edited by danielpublic; 2011-04-17 at 16:51. Reason: [emailed error log]

Quote & Reply |

	caco3	2011-04-17 , 20:27
	Posts: 560 \| Thanked: 423 times \| Joined on May 2010 @ Switzerland	#19

In case you already have installed one of the first package versions, you will get an error, if you install version 1.5-maemo3.
In version 1.5-maemo4 this should be fixed.
Alternatively, you can remove the broken file manually in the terminal.
As root, type this:
rm /bin/passwordmaker

Afterwards the installation will success.