Re: OTFE - some questions

2011-01-08 Thread Thomas Fernandez
Hello Roelof,

On Wed, 5 Jan 2011 03:07:56 +0100 GMT (05/Jan/11, 9:07 AM +0700 GMT),
Roelof Otten wrote:

M 1. What encryption does TB! used for OTFE? (Algorithm, key size, etc)

RO Unknown

M 2. What other programs can decrypt TB!'s encrypted files?

RO None

M 6. Does forgetting the password prevent any further access to the 
Mmessages?

RO Yes, unless you've created a backup. Even when you're using OTFE, TB's
RO backups  are  unencrypted, though it's possible to set a password with
RO encryption for your backups.

M 7. Can Voyager use OTFE?

RO Wrong question. ;-)
RO Voyager only uses OTFE, it can't use a plain message base.

I just cut this down to the points that concern my follow-up question:
I just found an old USB stick with Voyager. Trying to run it requires
a password, and I have tried all the combinations I could think of,
but cannot remember the old password.

I understand if I just reinstall Voyager, I still cannot read the
message base. Is there any way at all to retrieve the messages, or are
they lost forever?

BTW, does the latest Voyager allow plaintext if the user so decides?

-- 

Cheers,
Thomas.

http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 4.2.36.4
under Windows XP 5.1 Build 2600 Service Pack 3





Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: OTFE - some questions

2011-01-08 Thread Roelof Otten
Hallo Thomas,

On Sat, 8 Jan 2011 18:28:57 +0700GMT (8-1-2011, 12:28 , where I
live), you wrote:

TF I just cut this down to the points that concern my follow-up question:
TF I just found an old USB stick with Voyager. Trying to run it requires
TF a password, and I have tried all the combinations I could think of,
TF but cannot remember the old password.

In  that  case  the stored messages are lost to everyone, including to
you. That's why making backups was so important with Voyager.

TF BTW, does the latest Voyager allow plaintext if the user so decides?

Don't  know,  never had any real use for Voyager, so I stopped testing
it. But you could download the latest version and try it for yourself.

-- 
Groetjes, Roelof

And who among you shall moderate the moderators?
http://www.voormijalleen.nl/
The Bat! 5.0.0.127 BETA
Windows Vista 6.0 Build 6002 Service Pack 2
6 pop3 accounts, 1 imap account
OTFE disabled
Quad Core 2.4GHz
4 GB RAM

pgp2UWehzmx4G.pgp
Description: PGP signature

Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OTFE - some questions

2011-01-08 Thread Thomas Fernandez
Hello Roelof,

On Sat, 8 Jan 2011 16:53:29 +0100 GMT (08/Jan/11, 22:53 PM +0700 GMT),
Roelof Otten wrote:

TF I just cut this down to the points that concern my follow-up question:
TF I just found an old USB stick with Voyager. Trying to run it requires
TF a password, and I have tried all the combinations I could think of,
TF but cannot remember the old password.

RO In  that  case  the stored messages are lost to everyone, including to
RO you. That's why making backups was so important with Voyager.

I see. I used Voyager only as a crutch when travelling, as Thailand's
internet access was too slow and unreliable for IMAP or webmail. This
has changed in the meantime, and I now use webmail if I cannot use POP
with my laptop or IMAP with the iPhone.

TF BTW, does the latest Voyager allow plaintext if the user so decides?

RO Don't  know,  never had any real use for Voyager, so I stopped testing
RO it. But you could download the latest version and try it for yourself.

Never mind, I don't really have a need for Voyager any more. However,
it was indeed a very usefull tool at the time. I was just curious as
to what mails were on that old USB stick, which I just found during
house moving. Thanks for your reply.

-- 

Cheers,
Thomas.

http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 4.2.36.4
under Windows XP 5.1 Build 2600 Service Pack 3





Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: OTFE - some questions

2011-01-06 Thread Bill McQuillan

On Wed, 2011-01-05, MFPA wrote:

M 9. How is using TB!'s OTFE better than simply
M locating your mailfolder in an encrypted
M location, such as a TrueCrypt container?

 The  difference  is  that  when you've mounted the
 encrypted location, third party programs (doesn't
 matter whether they're Santa's 'good' or 'bad'  list)
 can  access  your  message  base. When you're using
 OTFE you're message base can only be accessed by TB and
 it's plug-ins.  

 Interesting - I'd not thought of that. Doesn't TB! need to place a
 decrypted version of a file in a temp directory while actually working
 with/editing it?

Well, since I believe that OTFE stands for On The Fly Encription I
imagine that whole files are not decrypted, but instead TB has a sort of
builtin driver to access the mail database while only decrypting and
encrypting a buffer at a time.


-- 
Bill McQuillan bill.mcquil...@pobox.com
Using The Bat! 2.11 on Windows XP 5.1 build 2600-Service Pack 2



Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: OTFE - some questions

2011-01-05 Thread MFPA
Hi


On Wednesday 5 January 2011 at 2:07:56 AM, in
mid:1674303343.20110105030...@otten.tv, Roelof Otten wrote:



M 3. What happens if you try to set up OTFE with a
M blank password?

 It's easy to guess the password

If TB! allows a blank password during installation, does the
encryption still work?



M 5. Can you change the password?

 Only  by  creating a backup, uninstalling TB, delete
 everything in the mail directory, install TB again,
 restore the backup

That sounds like a bit of hassle, to say the least!



M 6. Does forgetting the password prevent any further
M access to the messages?

 Yes, unless you've created a backup. Even when you're
 using OTFE, TB's backups  are  unencrypted, though it's
 possible to set a password with encryption for your
 backups.

I just found that if you select to encrypt the backup, the encryption 
algorithm is RC2. 



M 9. How is using TB!'s OTFE better than simply
M locating your mailfolder in an encrypted
M location, such as a TrueCrypt container?

 The  difference  is  that  when you've mounted the
 encrypted location, third party programs (doesn't
 matter whether they're Santa's 'good' or 'bad'  list)
 can  access  your  message  base. When you're using
 OTFE you're message base can only be accessed by TB and
 it's plug-ins.  

Interesting - I'd not thought of that. Doesn't TB! need to place a
decrypted version of a file in a temp directory while actually working
with/editing it?


-- 
Best regards

MFPAmailto:expires2...@ymail.com

Look, it's a hat! It's not going to hurt you.

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600  



Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


OTFE - some questions

2011-01-04 Thread MFPA
Hi

I have a few questions about OTFE. Been saving them up!

1. What encryption does TB! used for OTFE? (Algorithm, key size, etc)

2. What other programs can decrypt TB!'s encrypted files?

3. What happens if you try to set up OTFE with a blank password?

4. Are the Address Books and message templates encrypted, or just the
   messages?
   
5. Can you change the password?

6. Does forgetting the password prevent any further access to the 
   messages?
   
7. Can Voyager use OTFE?

8. If hardware tokens are used, is a password still required?

9. How is using TB!'s OTFE better than simply locating your mail
   folder in an encrypted location, such as a TrueCrypt container?


-- 
Best regards

MFPAmailto:expires2...@ymail.com

Dogs look up to us. Cats look down on us. Pigs treat us as equals.

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600  



Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: OTFE - some questions

2011-01-04 Thread Roelof Otten
Hallo MFPA,

On Tue, 4 Jan 2011 23:26:58 +GMT (5-1-2011, 0:26 , where I live),
you wrote:

M 1. What encryption does TB! used for OTFE? (Algorithm, key size, etc)

Unknown

M 2. What other programs can decrypt TB!'s encrypted files?

None

M 3. What happens if you try to set up OTFE with a blank password?

It's easy to guess the password

M 4. Are the Address Books and message templates encrypted, or just the
Mmessages?

Everything, included the tabs by smartbat

M 5. Can you change the password?

Only  by  creating a backup, uninstalling TB, delete everything in the
mail directory, install TB again, restore the backup

M 6. Does forgetting the password prevent any further access to the 
Mmessages?

Yes, unless you've created a backup. Even when you're using OTFE, TB's
backups  are  unencrypted, though it's possible to set a password with
encryption for your backups.

M 7. Can Voyager use OTFE?

Wrong question. ;-)
Voyager only uses OTFE, it can't use a plain message base.

M 8. If hardware tokens are used, is a password still required?

I don't know.

M 9. How is using TB!'s OTFE better than simply locating your mail
Mfolder in an encrypted location, such as a TrueCrypt container?

The  difference  is  that  when you've mounted the encrypted location,
third party programs (doesn't matter whether they're Santa's 'good' or
'bad'  list)  can  access  your  message  base. When you're using OTFE
you're message base can only be accessed by TB and it's plug-ins.

-- 
Groetjes, Roelof

Why experiment on animals, when there are so many Windows users around
http://www.voormijalleen.nl/
The Bat! 5.0.0.125 BETA
Windows Vista 6.0 Build 6002 Service Pack 2
6 pop3 accounts, 1 imap account
OTFE disabled
Quad Core 2.4GHz
4 GB RAM

pgpBqPW9nZulV.pgp
Description: PGP signature

Current version is 4.2.23 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html