Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill Thanks, folks, figured it out. Apparently, autofill doesn't work on iPads with the split keyboard enabled. Or rather, when I disabled the split keyboard, I saw a Passwords button and everything works like I'd expect. Ugh, not the first major iOS bug I've found so far. It's nice, but not the accessibility paradise I was led to expect. URL: https://forum.audiogames.net/post/570487/#p570487 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill @1, if you can't get strongbox to work, there is an app called Keypass Touch that has worked for me in the past and still does. You do have to pay 99 cents to remove ads and enable the autofill option, but it's well worth it in my opinion. Every time I log in somewhere, I can see a suggested login or, if not, a "Passwords" button where suggestions usually are, above the qwerty row of the keyboard. I tap that, select from a choice of iCloud Keychain or Keypass Touch, provide my fingerprint for decryption, and choose from my database entries. This app also offers ftp, dropbox, google drive, and even lan syncing as well, so you can keep your database always up to date across your devices. It's completely accessible.@3, I daresay a lot of people appreciate keypass because of its open source nature as well as the fact that keypass stores its passwords in an offline database which you can choose where to keep. In contrast, your passwords may be stored in the cloud with another password manager such as OnePassword. That, at least, is a feature I very much enjoy. URL: https://forum.audiogames.net/post/570484/#p570484 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill @4, I don't find anything disrespectful here. Dogs do like ham, atleast here lol. URL: https://forum.audiogames.net/post/570481/#p570481 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill The way that it works depends. There are 3 contexts I've seen password autofill popp up. First, sometimes iOS will just detect you're on a screen with a login form, and if it finds a matching password in your manager it'll pop up a rather large window near the bottom of the screen offering you to log in. If it doesn't realise this, tapping on either the username or password field to pop up the keyboard should work. Explore directly above the first row of the keyboard, where you normally see autocomplete suggestions pop up. Again, if it finds a matching log in, then it'll just give you a button here saying what username and site the suggestion comes from and you can just tap on it to autofill. If it can't match it to anything, you should still see a "passwords" button that'll take you into your vault so you can manually select the correct password.As far as using alternative apps, for the actual autofill process all of them work the same way since they tap into the dedicated iOS autofill API, so this part of the process shouldn't be any different whether you use StrongBox, OnePassword, BitWarden or anything else that says it supports the iOS autofill API. URL: https://forum.audiogames.net/post/570479/#p570479 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill @NunoA joke, but kinda disrespectful...Probably because it's open source so it can be examined by third party security auditors more easily, and because their are tons of client choices so you can find one that suits you the best. URL: https://forum.audiogames.net/post/570443/#p570443 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill @NunoProbably because it's open source so it can be examined by third party security auditors more easily, and because their are tons of client choices so you can find one that suits you the best. URL: https://forum.audiogames.net/post/570443/#p570443 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill 1Password is much better than KeePass IMO. I don't see why people love that program like a dog loves a piece of ham lol. URL: https://forum.audiogames.net/post/570441/#p570441 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Password managers, iOS, and accessible autofill
Re: Password managers, iOS, and accessible autofill I often find the button in question above password fields, or sometimes integrated into the app, usually just past the submit button. But of course it needs to be ones I have a saved password for and it can only happen when your third party password manager is set to be the default one in passwords and accounts.Most blind people use 1Password for it's accessibility, so maybe you can try that one and see if it does the same thing or not? URL: https://forum.audiogames.net/post/570439/#p570439 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @40, Oh, yeah, I was looking at it from a logged-in point of view. Makes sense. URL: https://forum.audiogames.net/post/544034/#p544034 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @39 Idk. Maybe you have a really old version of the desktop app or are facing some accessibility issue with your particular screen reader.When you first launch the app and it asks for your master password, click logout.On this page your options should be:Email address, Master Password, Toggle Visibility, Login, Create account, Get master password hint, Settings.When you click settings, the first option in the frame that opens is server URL under the heading Self hosted environment.Actually that's the only option I have in the Mac OS version.I didn't face any problems setting it up under Windows or IOS either, so I don't know what's different about your environment.The only thing I notice is that the app doesn't hide the log in window from screen readers when it pops up the settings modal, so it appears below the log in fields. URL: https://forum.audiogames.net/post/543896/#p543896 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @35, I don't see "server URL" in the desktop app anywhere. I go into settings and I just see only the security stuff (vault timeout, vault timeout action, ...). I trust these guys, given that the system is fully open-source and I significantly doubt they'd deliberately compromise the managed server platform (and I suspect that the encryption key is derived using a key derivation function like PBKDF2). I could check the code though. URL: https://forum.audiogames.net/post/543176/#p543176 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers The Solo keys are one-part components, the Solo as well as the SOMU, and thus there are no parts which can fall apart. Its still a thing though, you can of course crush it under your foot if you so desire, but the Solo for example is just a thing USB device which comes with a cover you put around it which improves the grip and allows it to be attached to a keyring. The SOMU is so small that you can plug it into an USB slot and it will almost entirely disappear within it, so no way to damage or lose the component whilst in there. The SOMU however isn't your usual daily security helper on the go, because its ment to stay in its place so that you have additional security without having to plug the Solo in and out all the time. Its good as e.g. a cheap backup solution, if you want to be on the safe side, stick with a Solo, that thing is ment to be portable and, without having seen a Yubikey yet, I think its robust and works well, even after using it for over a year now and plugging it in and out several times per day.Best Regards.Hijacker URL: https://forum.audiogames.net/post/543106/#p543106 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Hijacker: Are the solo keys as tough and durable as ubikeys claim to be? Pretty sure they have to be in order to be a respected security key brand, since no one wants to be screwed because of their keys falling apart. That's why I'm very glad that Anchor, Amazon Basics, and other cheap brands haven't jumped into the u2f race. URL: https://forum.audiogames.net/post/543103/#p543103 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Hijacker: Are the solo keys as tough and durable as ubikeys claim to be? Pretty sure they have to be in order to be a respected security key brand, since no one wants to be screwed because of their keys falling apart. URL: https://forum.audiogames.net/post/543103/#p543103 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @35. nice. I didn't know you can do that with Jitsi lol. TIL. URL: https://forum.audiogames.net/post/543094/#p543094 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Ethin wrote:while you can host it, you can't set the desktop app to your hosted instance to my knowledge.Yes you can. This is exactly how I do things.You simply click settings. Server URL is the first option.I choose to self host as much of my IT as I possibly can.The full list:Email system (nobody gets to sell my name, email and who I correspond with to known criminals),Nextcloud server (my files aren't that interesting to anyone but me, but I'm not putting all my eggs in the Apple/ Google basket and having them eventually pull a pricing bait and switch),Bitwarden server (I use it for very sensitive data, and I don't trust anyone who tells me they use end to end encryption and expects me to take their word at face value),Jitsi video conferencing server (Screw Zoom. They lied about end to end encryption. My conversations aren't that interesting but children should be kept off that platform for fear of who Zoom might sell their voices/ images to). URL: https://forum.audiogames.net/post/543075/#p543075 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I use Rocky's Password Manager. It works reasonably well. The only issue I have with it is the fact I can't find my password file. If I run the program as an administrator, it writes it to the ProgramFiles (X86) folder. Where does the data get stored when not running as admin? URL: https://forum.audiogames.net/post/543051/#p543051 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Ethin: rest assured, you and me are unable to look behind the encryption-internals of Solo, but others are, and they are supporting it every day to improve its security. You can only upgrade Solo with its own firmware, as long as you don't get a hacker version, which is basically unlocked so you can really play with it, but the normal, secure version only supports upgrading with newer and signed versions of the official solo firmware, nothing else, approved by several security experts by reading and understanding the code as well as testing it themselves, which you can do yourself if you so desire, getting a Solo key to play around with is not that expensive too. BTW, not even Solo themselves is able to read the internal encryption key of the Solo keys with invalid or valid new firmwares alike, so no chance, even for hackers, to get this key out of the controller on purpose.I don't want to say that Yubekeys are bad at all. They are working fine and they are out on the market much longer than Solo, which is one of the reasons why they are so popular, but I personally don't like the idea of not being able to upgrade my hardware with new features when necessary. I just wanted to say that Solo is much cheaper than the Yubikeys and comes with the same feature set, plus its open source in hardware and software, and due to its popularity, all kind of experts validated both and are happy with the results, trusting in Solo each day.After all, there are many more U2F key distributors out there and all of them have their pros and cons, if you want to use one of those yourself, its probably best to inform about multiple of them and decide for the one you want to stick around with, but for people who don't have the money for a Yubikey right from the start and want to see how U2F actually works, getting a cheaper alternative like Solo might be the better option.Best Regards.Hijacker URL: https://forum.audiogames.net/post/542990/#p542990 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Ethin: rest assured, you and me are unable to look behind the encryption-internals of Solo, but others are, and they are supporting it every day to improve its security. You can only upgrade Solo with its own firmware, as long as you don't get a hacker version, which is basically unlocked so you can really play with it, but the normal, secure version only supports upgrading with newer and signed versions of the official solo firmware, nothing else, approved by several security experts by reading and understanding the code as well as testing it themselves, which you can do yourself if you so desire, getting a Solo key to play around with is not that expensive too.I don't want to say that Yubekeys are bad at all. They are working fine and they are out on the market much longer than Solo, which is one of the reasons why they are so popular, but I personally don't like the idea of not being able to upgrade my hardware with new features when necessary. I just wanted to say that Solo is much cheaper than the Yubikeys and comes with the same feature set, plus its open source in hardware and software, and due to its popularity, all kind of experts validated both and are happy with the results, trusting in Solo each day.After all, there are many more U2F key distributors out there and all of them have their pros and cons, if you want to use one of those yourself, its probably best to inform about multiple of them and decide for the one you want to stick around with, but for people who don't have the money for a Yubikey right from the start and want to see how U2F actually works, getting a cheaper alternative like Solo might be the better option.Best Regards.Hijacker URL: https://forum.audiogames.net/post/542990/#p542990 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @31, fair, but I don't think Yubico will do that. And I suspect they do conduct outside auditing -- if they didn't I don't think they'd be so highly recommended by so many different people, not just here but in all sorts of other places. They even make HSMs, too. Also, for those who missed it, see 30. I don't like the locked-down stuff with Yubikeys myself, but I do understand the reasoning behind it. URL: https://forum.audiogames.net/post/542877/#p542877 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @31, fair, but I don't think Yubico will do that. And I suspect they do conduct outside auditing -- if they didn't I don't think they'd be so highly recommended by so many different people, not just here but in all sorts of other places. They even make HSMs, too. URL: https://forum.audiogames.net/post/542877/#p542877 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @31, fair, but I don't think Yubico will do that. And I suspect they do conduct outside auditing -- if the ydidn't I don't think they'd be so highly recommended by so many different people, not just here but in all sorts of other places. URL: https://forum.audiogames.net/post/542877/#p542877 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Hijacker: Sounds much better considering it's open source. Both keys have their advantages and disadvantages. From a security sense, it's mostly a good thing that Ubikeys were so thoroughly locked down, but that also means there's no outside auditing. Plus they could easily pull a sonos and brick older keys, which is another thing that has me slightly hesitant. No great loss considering the Solo keys re essentially the same thing, but more transparent. URL: https://forum.audiogames.net/post/542876/#p542876 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Hijacker: Sounds much better considering it's open source. However, it's mostly a good thing that Ubikeys were so thoroughly locked down, but that also means there's no outside auditing. Plus they could easily pull a sonos and brick older keys, which is another thing that has me slightly hesitant. No great loss considering the Solo keys re essentially the same thing, but more transparent. URL: https://forum.audiogames.net/post/542876/#p542876 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @29, there's no additional cost for gPG functionality in Yubikeys. One thing I dislike, but understand, is the inability to update firmware on the Yubikey. I understand Yubico's reasoning, however. Its too easy to install a malicious firmware payload on the device. Same issue with the Solo; its a hack tool, and I doubt its meant to be used in actual security-sensitive scenarios. You can program the thing with Python, FFS... I certainly wouldn't trust any sensitive data on a device that, to my knowledge, has absolutely no protective safeguards against reprogramming it and leaking all the sensitive information that it might contain (and that can most likely be done remotely too). I like the idea of open-source hardware, I really do, but if they're going to be used in a security-sensitive environment, I expect them to have a lot of protective measures to ensure they can't be tampered with, open-source or not. So I don't think I'll be trusting the Solo any time soon until they've proven that they are a better alternative. (Yes, Yubikeys have bluetooth, but you can trivially buy one without that option.) I'm not saying I dislike the idea or concept of the Solo; if they prove that ultimately they're a lot better than what Yubico has, and their devices prove secure in a security-sensitive context, then I'll go for it. But to my knowledge no such proof exists. (Yes, they're open source, but I don't have the skillset needed to prowl through complex algorithms like AES and actually determine if the implementation of it is competent or whether its going to leak data all over the place.) URL: https://forum.audiogames.net/post/542875/#p542875 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @Hijacker: Much better. For a while I thought it was a good thing that Ubikeys were so thoroughly locked down, but that also means there's no outside auditing. Plus they could easily pull a sonos and brick older keys, which is another thing that kept me from buying them. No great loss considering the Solo keys re essentially the same thing, but more transparent. URL: https://forum.audiogames.net/post/542876/#p542876 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @29, there's no additional cost for gPG functionality in Yubikeys. One thing I dislike, but understand, is the inability to update firmware on the Yubikey. I understand Yubico's reasoning, however. Its too easy to install a malicious firmware payload on the device. Same issue with the Solo; its a hack tool, and I doubt its meant to be used in actual security-sensitive scenarios. You can program the thing with Python, FFS... I certainly wouldn't trust any sensitive data on a device that, to my knowledge, has absolutely no protective safeguards against reprogramming it and leaking all the sensitive information that it might contain (and that can most likely be done remotely too). I like the idea of open-source hardware, I really do, but if they're going to be used in a security-sensitive environment, I expect them to have a lot of protective measures to ensure they can't be tampered with, open-source or not. So I don't think I'll be trusting the Solo any time soon until they've proven that they are a better alternative. (Yes, Yubikeys have bluetooth, but you can trivially buy one without that option.) URL: https://forum.audiogames.net/post/542875/#p542875 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers If you want something more effordable with the same feature list, stick to Solo: See here.Supported them via Kickstarter from the first day, the same feature set like Yubikey and others, with the exception that they don't offer a Lightning version for the use on e.g. an iPhone, but it should be possible to get a USB-C/Lightning adapter or an USB A/Lightning Adapter and use them on an iPhone as well. The Solo tap with NFC builtin goes for $35, which is the most expensive one, USB-C on that one costs $40 and thats it.Solo explicitely decided not to go for Bluetooth, because the Bluetooth protocol just isn't secure enough to be used for security purposes, due to being sniffable pretty easily.GPG support is not fully finished yet, but its in the works and should be in the finishing steps, so we can expect that to arrive in like one or two months as well, without any additional cost of course.Best Regards.Hijacker URL: https://forum.audiogames.net/post/542862/#p542862 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers If you want something more effordable with the same feature list, stick to Solo: See here.Supported them via Kickstarter from the first day, the same feature set like Yubikey and others, with the exception that they don't offer a Lightning version for the use on e.g. an iPhone, but it should be possible to get a USB-C/Lightning adapter or an USB A/Lightning Adapter and use them on an iPhone as well. The Solo tap with Bluetooth builtin goes for $35, which is the most expensive one, USB-C on that one costs $40 and thats it.GPG support is not fully finished yet, but its in the works and should be in the finishing steps, so we can expect that to arrive in like one or two months as well, without any additional cost of course.Best Regards.Hijacker URL: https://forum.audiogames.net/post/542862/#p542862 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @26, trust me, they're not very expensive at all. They might appear that way in your country but that's not much. They're also not just an encryption drive; they can work with WebAuthn (security keys) on services like Google, GitHub, etc., you can store GPG keys on them... they're definitely worth the price. @Jack, I have the USB A 5C, I think. Its a slightly older model -- mines about a year or so old now. URL: https://forum.audiogames.net/post/542849/#p542849 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Some have both usbC and Bluetooth or NFC. Bluetooth is not cheap. And these aren't your dollar store flash drives that can break if dropped a few times. These are tough, durable and probably stress-tested a lot more than the freaking so-called road-ready drives you see on lanyards. I *believe* they're insured too, but don't quote me on that because it's never good to lose the keys, insured or otherwise. URL: https://forum.audiogames.net/post/542850/#p542850 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Why are yubi keys so exensive?I mena, they're great and all, but at the end of the day they're a USB drive with encryption, so I cna't get the large price tag. URL: https://forum.audiogames.net/post/542844/#p542844 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Bitwarden is open source. It can be professionally audited. So yes, your password is stored on a sever. Under multiple layers of encryption. And it's self-deployable. I still don't trust server-hosted password managers without a ubikey though, since that's one impassable obstacle for hackers. Even if they were to penetrate the server the data would be pretty useless to them long enough for users to be warned, and hopefully trusted to change their passwords (a long endeavor, but it will always, always take less time to change your password on your accounts than it will take to recover from identity theft/account takeovers.. URL: https://forum.audiogames.net/post/542760/#p542760 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers hmm, I personally don't relaly trust any password manager that stores my password on some random server. URL: https://forum.audiogames.net/post/542675/#p542675 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Hello. I personally use bitwarden. I was using the one built into chrome but given Google's recent track record with the incognito tracking with chrome I completely switched away from chrome and went to brave. The only thing is the bitwarden app can use a bit of work on the IOS app. Some parts of it you have to drag your finger on the screen to get where you need to go but that is only viewing passwords when you click on them and the password generation part of the app. I will be contacting them and see if they have been made known of this. But don't let that stop you from using on IOS. I have been using it for 2 weeks or so and find it very usable and it works perfectly on a browser or the windows app. Can't speak to the mac app. If you guys want to read an article about the chrome tracking thing, here you go.https://thenextweb.com/apps/2020/06/04/ … e-lawsuit/Also another note on bitwarden. You can have it integrate into the iPhone keyboard and you can autofill passwords for apps and websites no problem. I have been looking for something like this for years and finally found. I hope this helps you all out. URL: https://forum.audiogames.net/post/542674/#p542674 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Are yubi keys worth it? I've seen them but have nevre tried them. URL: https://forum.audiogames.net/post/542643/#p542643 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @ethin: Which ubikey did you get? There's the newer usbC ubikey5 for $60, and then an older one for $20 or so. The $20 one would be tempting were it not for the fact Lastpass doesn't support it, which leads me to believe it's got an older, weaker encryption protocol. Also, good to know re: the desktop app. I wonder if that's something you could change in the config, i.e. what server to connect to. Then again, the source is always available, so it's nothing short of recompiling a redirected custom build that has the proper server details.@supremekiller: It's a jury-rigged solution. I wrapped the compiled executable in Software Passport/Armadilo drm protection with no default/trial certificate. There's a persistent check for the flash drive as part of the hardware fingerprint, using native usb drive serial number detection. Being as it's python, I had to have it leave the data-after-execution alone, so while it isn't exactly layet upon layer of protection, it does the job. If a keystroke logger caught my master password, I wouldn't always have my flash drive plugged in, so I could move the pwm to another machine and see what's wrong on the primary, kill the problem, and quick change my master pass. No background processes are launching the thing without the flash drive inserted. And there aren't many passive strongarming utilities to break a program out of an Armadilo shell, being as most programs are for obvious reasons not autonimous, seeing as their original purpose would be to crack a program, not to passively strip a non-commercial password manager out of its shell. IT isn't perfect though, since the device is just a flash drive, not a ubikey. So I don't get the benefit of having to touch the key physically before it activates. URL: https://forum.audiogames.net/post/542578/#p542578 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @supremekiller: It's a jury-rigged solution. I wrapped the compiled executable in Software Passport/Armadilo drm protection with no default/trial certificate. There's a persistent check for the flash drive as part of the hardware fingerprint, using native usb drive serial number detection. Being as it's python, I had to have it leave the data-after-execution alone, so while it isn't exactly layet upon layer of protection, it does the job. If a keystroke logger caught my master password, I wouldn't always have my flash drive plugged in, so I could move the pwm to another machine and see what's wrong on the primary, kill the problem, and quick change my master pass. No background processes are launching the thing without the flash drive inserted. And there aren't many passive strongarming utilities to break a program out of an Armadilo shell, being as most programs are for obvious reasons not autonimous, seeing as their original purpose would be to crack a program, not to passively strip a non-commercial password manager out of its shell. IT isn't perfect though, since the device is just a flash drive, not a ubikey. So I don't get the benefit of having to touch the key physically before it activates. URL: https://forum.audiogames.net/post/542578/#p542578 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I use bitwarden. I've got a Yubikey to authenticate to my bitwarden vault. And yes, while you can host it, you can't set the desktop app to your hosted instance to my knowledge. The premium version is $10.00 per year -- that's a price that's hard to beat. And its fully open-source, too. I've done my best to switch all my accounts to use random passwords -- and I've pretty much succeeded. URL: https://forum.audiogames.net/post/542550/#p542550 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I didn't know about Strongbox, I'll have to look into that. KeePass Touch has suited me pretty well on my phone, but Strongbox seems to have some nice features. URL: https://forum.audiogames.net/post/542542/#p542542 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Yeah, but Bitwarden supports all of that natively, and when I switched, which was last year, it wasn't really possible to buy apps on the appstore from Serbia, so I had to look for a free option. URL: https://forum.audiogames.net/post/542058/#p542058 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @14, just FYI, Strongbox supports both of the features you were searching for before switching to Bitwarden. It also supports checking your database for insecurities (like passwords used more than once, too weak passwords specified by the credentials you select, or even already leaked passwords with the help of have I been pwned, which I like pretty much and started to change all of my passwords all after another step by step). URL: https://forum.audiogames.net/post/542047/#p542047 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Wait, how do you setup hard drive authorization? URL: https://forum.audiogames.net/post/541999/#p541999 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I'd like to see u2f or windows hello (there is a Python api for windows hello might I add). I feel like I'll have to roll my own lockdown with Armadilo drm for now. Having a flash drive authorization is not ideal, but at least it avoids any strongarm by someone just attempting to run the damn thing and brute force the master password, or keystroke log which is unlikely. URL: https://forum.audiogames.net/post/541738/#p541738 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers i would also recommend rocky's password manager. it's free, easy to use and designed from the ground up with blind people in mind. you can get it from www.rockywaters.co.uk. URL: https://forum.audiogames.net/post/541728/#p541728 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I have used kee pass for a while, but switched to Bitwarden due to not finding any suitable IOS app for it. By suitable here we mean of course an app that can do autofill and use touch ID to authenticate, both of which Bitwarden does perfectly. As for questionable intentions, the thing is open source, so it can be examined all you want. Best yet, you can just host your instance and not worry about who gets access to the information at all. Now of course not everyone is able to do that, but it's an option. URL: https://forum.audiogames.net/post/541711/#p541711 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Honestly, excluding my passwords, I don't really care what else google collects, but passwords are on an advanced level so. URL: https://forum.audiogames.net/post/541632/#p541632 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers @7:I don't have any problem with that. I've tried other password managers including Keypass, but it's too much hassle for me to manage. We will see when Google messes with my privacy for using their service, which honestly, i don't see will ever happen. All my photos are backed up to Google Photos, My web activity is through Google's Chrome browser, and 20 plus Google apps are sitting in my phone with various permissions about camera, mike, etc etc. Hell my PC and laptop as well as my contacts are backed up to Google's servers. What can possibly go wrong. URL: https://forum.audiogames.net/post/541554/#p541554 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers After just reading that I have to pay to get some of the bitwarden server features, no thanks. URL: https://forum.audiogames.net/post/541534/#p541534 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Same here, KeePass is my choice. Totally accessible on Windows, using Strongbox on iOS, which is entirely accessible but not free, either you'll have to subscribe monthly/yearly or pay once forever. There are also alternatives to Strongbox, like KeePassium or KeePass Touch, which are much cheaper, but don't offer as many features as Strongbox does.I'm storing my password storage on my private server which is sitting next to me in my office right now, to be as secure as possible about where my data can be found and who can access it.There is KeePass Tusk as a browser extension for Chrome, which is accessible and works fine.Bitwarden would be my second choice as well, but KeePass works fine for now.Best Regards.Hijacker URL: https://forum.audiogames.net/post/541530/#p541530 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Same here, KeePass is my choice. Totally accessible on Windows, using Strongbox on iOS, which is entirely accessible but not free, either you'll have to subscribe monthly/yearly or pay once forever. I'm storing my password storage on my private server which is sitting next to me in my office right now, to be as secure as possible about where my data can be found and who can access it.There is KeePass Tusk as a browser extension for Chrome, which is accessible and works fine.Bitwarden would be my second choice as well, but KeePass works fine for now.Best Regards.Hijacker URL: https://forum.audiogames.net/post/541530/#p541530 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Thanks for this info!I've heard about and once tried keypass butI have a question.Can I make this get passwords form my browser? and also can it tell me if my passwords are weak?Thanks again for the info. URL: https://forum.audiogames.net/post/541528/#p541528 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I love KeePass. Stores data locally instead of the server of some company with questionable intentions, in a database file with very strong encryption. It's portable, so you can take it with you on an USB Stick. There are clients for it for pretty much every OS. Haven't tested all of them obviously, but the Windows version is completely accessible (slightly more so once you enable screen reader support in the settings), and several of the Android apps on FDroid are accessible as well.If you want a more privacy-friendly password manager, this is pretty much your best bet, imo.https://keepass.info/Bitwarden, which was suggested in post 3, would be my second choice. Sure, it can be a cloud-based password manager, but you can also self-host it if you feel like doing so. Since you want a completely offline manager though, KeePass still wins. URL: https://forum.audiogames.net/post/541527/#p541527 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers I love KeePass. Stores data locally instead of the server of some company with questionable intentions, in a database file with very strong encryption. It's portable, so you can take it with you on an USB Stick. There are clients for it for pretty much every OS. Haven't tested all of them obviously, but the Windows version is completely accessible (slightly more so once you enable screen reader support in the settings), and several of the Android apps on FDroid are accessible as well.If you want a more privacy-friendly password manager, this is pretty much your best bet, imo.https://keepass.info/Bitwarden, which was suggested in post 3, would be my second choice. Sure, it can be a cloud-based password manager, but you can also self-host it if you feel like doing so. URL: https://forum.audiogames.net/post/541527/#p541527 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers will bitwarden allow me to create a password vault offline and not in the cloud? URL: https://forum.audiogames.net/post/541526/#p541526 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers MyDearWatson wrote:The best one is the 1 which you already have in your pocket. Did you know that Google provides a password manager. It's available everywhere if you use the Chrome browser. Very accessible too. On...Yeah, those are safe alright. Safe in the hands of Alphabet's data buyers.Google Passwords=bustICloud Keychain=bustBrave's password manager=definite maybe depending on the site, but still doesn't replace a dedicated password manager.I am using the one that Rocky Waters created, the one that was community-stress-tested. As risky as rolling your own crypto is, this seems to do the job well. Though a weakness is a lack of first-letter navigation (pygame limitations perhaps) and the inability to save your passwords file in an obscure folder with a different filename. Back on Windows XP I used that exact strategy with Anypassword, storing the passwords file in a folder you wouldn't bother to look, and renaming it. You also have no Windows Hello fingerprint support, or u2f for that matter.For that reason, I'm thinking Bitwarden is next on the list, but not until I've purchased a u2f security key. That's the only way I'm trusting a cloud pwm, and Bitwarden's premium pan has support for exactly that. URL: https://forum.audiogames.net/post/541525/#p541525 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Yup but I'd prefer an offline password manager that doens't store my data in the cloud. URL: https://forum.audiogames.net/post/541502/#p541502 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers The best one is the 1 which you already have in your pocket. Did you know that Google provides a password manager. It's available everywhere if you use the Chrome browser. Very accessible too. On phones may be you need 1 of the recent Android versions for that to work in apps. URL: https://forum.audiogames.net/post/541499/#p541499 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
2020-06-15
Thread
AudioGames . net Forum — Off-topic room : ashleygrobler04 via Audiogames-reflector
Re: password managers I've had an old bgt password manager in the past, but i am thinking of making a new one with wxpython and you've guessed it... python. URL: https://forum.audiogames.net/post/541486/#p541486 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers https://bitwarden.com/Accessible and free. URL: https://forum.audiogames.net/post/541484/#p541484 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: password managers
Re: password managers Hmmm, here goes nothing. NordPass came with my NordVPN subscription. It's accessible with screen readers on Windows, iOS and Android, along with the browser integrations. It has a standard free mode and subscriptions with the limitations placed on the free version we've all come to expect though I suppose that isn't too bad if you don't plan to sync between multiple devices. Read up on it here. URL: https://forum.audiogames.net/post/541473/#p541473 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
