zx2c4

75 ms·

691.
by zx2c4 14y ago
Sorry, I should have written more clearly: the functionality you want -- gpg unlocked by login password -- is already available, implemented, and easy to use. Look around on your distribution. It exists.
692.
by zx2c4 14y ago
Then you should also be using disk encryption, for your browser history and whatever else.
693.
by zx2c4 14y ago
Keepass is exactly the bloated overweight system I was trying to avoid. pass is available for Ubuntu.
694.
by zx2c4 14y ago
Your system is basically the same. pass is not a "complete application", but it's actually just a tiny shellscript. (RTFA...). You have to reenter the master password if that's the way GPG is setup. Or you don't have to reenter it, if it's
695.
by zx2c4 14y ago
It's not as if you're putting the names on the internet. They're still on your hard drive, beside your non-encrypted web browser session and history. For this kind of protection, even though it's leaked in a million places (unencrypted SMTP
696.
by zx2c4 14y ago
If you want to unlock on log-in, just have your gpg key unlocked by your login password. Gnome keychain is capable of this. Your request is a definite possibility. I prefer having the key + passphrase over just a passphrase. It makes it mor
697.
by zx2c4 14y ago
Because this information is stored elsewhere, unencrypted almost always.
698.
by zx2c4 14y ago
It shouldn't be considered secret, period. If you're worried about non-secret data being used to attack you (the kind of data people can acquire by digging through your trash when you bring it out to the curb, for example), then your likely
699.
by zx2c4 14y ago
Usernames aren't considered to be privileged data. If you're relying on your usernames being secret, then you're making a big mistake and you should rethink things. Alternatively, generic names. For search, just use grep. "pass | grep whate
700.
by zx2c4 14y ago
Usernames aren't considered to be privileged data. If you're relying on your usernames being secret, then you're making a big mistake and you should rethink things.
701.
by zx2c4 14y ago
Great! Glad you like it. Let me know if you have any suggestions or feature requests.
702.
by zx2c4 14y ago
Exactly.
703.
by zx2c4 14y ago
Whoa nice you have a GPG smart card? Very cool. There were some people giving out USB tokens at FOSDEM which looked sort of neat but I haven't gotten it working reliably. GPG is mostly easy to use -- gpg -e -r someone@somewhere.com file.txt
704.
by zx2c4 14y ago
Hopefully you're able to fashion pass into storing the data you want? I don't like using my login key as a passphrase; seems flimsy, and I don't like having to use PAM tie-ins and whatnot when I change the system password. GPG has gpg-agent
705.
by zx2c4 14y ago
This was exactly what I was trying to avoid. I don't want this big behemoth. I want something small and easy and simple. A file for each password. If I want additional data, I can just use multiline. Or, I can establish a .meta convention i
706.
by zx2c4 14y ago
This seems really complicated. The whole point is to keep things simple and easy and not bloated with lots of applications and database formats and whatnot. In any case, the GPG files have the ID of the key needed to decrypt them, so you ca
707.
by zx2c4 14y ago
Next time, use grsecurity & pax. No excuses not to. Kernel hardening that you must absolutely have on a shared box. http://grsecurity.net/ http://en.wikibooks.org/wiki/Grsecurity http://en.wikipedia.org/wiki/Grsecurity http://en.
708.
Super Simple Command-line Program for Organizing Music Collections(blog.zx2c4.com)
1 points by zx2c4 14y ago|0 comments
709.
OS X Local Root Vulnerabilities via OpenVPN Clients Tunnelblick and Viscosity(blog.zx2c4.com)
6 points by zx2c4 14y ago|0 comments
710.
Very simple no-nonsense password manager that uses directories and gpg(git.zx2c4.com)
2 points by zx2c4 14y ago|0 comments
711.
by zx2c4 14y ago
Better yet, just allow directory indexes on /js and /css, showing the smaller files that the minified one is built from. You can do this, and also minify them using a Makefile. zx2c4@albali ~/zx2c4.com $ cat Makefile JS_DIR = js CSS
712.
by zx2c4 15y ago
All cleaned up now: http://git.zx2c4.com/Stripe-CTF/tree/
713.
by zx2c4 15y ago
Wadja end up doin'? Source?
714.
by zx2c4 15y ago
That's neat. Timing. Awesome. I made mine a bit more reliable and made a movie. Source: http://pastebin.com/6M4cq8gB Video: http://www.youtube.com/watch?v=_q2wTd1jgUQ
715.
by zx2c4 15y ago
SPOILER SPOILER SPOILER Don't look at this if you actually want to enjoy the contest. http://pastebin.com/VJ4xpawq
716.
by zx2c4 15y ago
This version works on Fedora: http://git.zx2c4.com/CVE-2012-0056/tree/mempodipper.c?h=fedo...
717.
by zx2c4 15y ago
Thanks for the improvement. I've made the < modification in this commit: http://git.zx2c4.com/CVE-2012-0056/commit/?id=49174152d57ffc... And made a separate branch for /bin/mount: http://git.zx2c4.com/CVE-2012-0056/commit/?h=mount
718.
by zx2c4 15y ago
I hadn't read about this oldie (97) before. Awesome! Good read.
719.
by zx2c4 15y ago
Goto is common for error out code in C. The code that uses that mentioned in the blog code is from the linux kernel, not any exploit code. But please, for the love of god, can we not make this discussion thread an extended conversation on
720.
by zx2c4 15y ago
Yulp >=2.6.39 :-)

More ›