Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Thu, 2018-07-19 at 06:16 +0200, Tollef Fog Heen wrote: > ]] Michael Stone > > > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > > It writes to `/dev/shm` which is not disk. > > > > All else that's been said aside, this idea is also dangerously > > incorrect in a typical

Re: Bug#903815: ITP: pw -- A simple command-line password manager

Tollef Fog Heen writes: > Assuming it's small enough, using a pipe (or possibly a FIFO) could > work. That's kernel memory and iirc it won't be swapped out. (I'm > happy to be corrected on this, I'm basing it on what I've heard before > and my recollection of it.) There's a Kerberos ticket

Re: Bug#903815: ITP: pw -- A simple command-line password manager

]] Michael Stone > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > >It writes to `/dev/shm` which is not disk. > > All else that's been said aside, this idea is also dangerously > incorrect in a typical configuration: the tmpfs backend will write to > swap under memory

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On 18 July 2018 at 00:00, Michael Stone wrote: > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > > > It writes to `/dev/shm` which is not disk. > > All else that's been said aside, this idea is also dangerously incorrect in > a typical configuration: the tmpfs backend will

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: It writes to `/dev/shm` which is not disk. All else that's been said aside, this idea is also dangerously incorrect in a typical configuration: the tmpfs backend will write to swap under memory pressure. (This is also true of

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, 16 Jul 2018 15:31:07 +0200, Dashamir Hoxha wrote: >This is not a realistic example. You corrupt the `tar` command and then >expect >the program to work well. You might as well delete manually the archive >file and >then expect the program to work well. In both cases, I would expect a

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 04:45:58PM +0200, Philipp Kern wrote: > > Can we assume you didn't look at the code trying to follow the logic and > > you don't have the full picture? > > Can we please stop here? It takes grace to take back the request. Sure, but this email was sent before receiving that

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On 2018-07-16 15:58, Andrey Rahmatullin wrote: Can we assume you didn't look at the code trying to follow the logic and you don't have the full picture? Can we please stop here? It takes grace to take back the request. Kind regards and thanks Philipp Kern

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 4:08 PM Andrey Rahmatullin wrote: > On Mon, Jul 16, 2018 at 03:49:18PM +0200, Dashamir Hoxha wrote: > > > > > ++ mktemp -d /dev/shm/pw.sh.X > > > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > > > [...] > > > > > + decrypt /home/pkern/.pw/pw.tgz > > > > > +

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:45 PM Philipp Kern wrote: > On 16.07.2018 15:14, Dashamir Hoxha wrote: > > On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern > > wrote: > > > > rather than trying to appeal to authority like Marc - I could have > been > > wrong -, I will

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:43 PM Andrey Rahmatullin wrote: > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > > ++ mktemp -d /dev/shm/pw.sh.X > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > [...] > > > + decrypt /home/pkern/.pw/pw.tgz > > > + local

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:49:18PM +0200, Dashamir Hoxha wrote: > > > > ++ mktemp -d /dev/shm/pw.sh.X > > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > > [...] > > > > + decrypt /home/pkern/.pw/pw.tgz > > > > + local archive=/home/pkern/.pw/pw.tgz > > > > + local 'opts=--quiet --yes

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On 16.07.2018 15:14, Dashamir Hoxha wrote: > On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern > wrote: > > rather than trying to appeal to authority like Marc - I could have been > wrong -, I will point out that my first point was not actually addressed > at all:

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > ++ mktemp -d /dev/shm/pw.sh.X > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > [...] > > + decrypt /home/pkern/.pw/pw.tgz > > + local archive=/home/pkern/.pw/pw.tgz > > + local 'opts=--quiet --yes --batch ' > > + [[ -z

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:03 PM Philipp Kern wrote: > On 16.07.2018 14:24, Dashamir Hoxha wrote: > > I have the same answer that I gave to Philipp. He has not looked close > > enough to the code, and has not tried to follow its logic. > > For example, error *messages* of `tar` are suppressed,

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: >On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern <[1]pk...@debian.org> wrote: > > This clearly writes the unencrypted tarball out to disk. > >It writes to `/dev/shm` which is not disk. That is not a valid assumption. You

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern wrote: > Hi, > > rather than trying to appeal to authority like Marc - I could have been > wrong -, I will point out that my first point was not actually addressed > at all: > > ++ mktemp -d /dev/shm/pw.sh.X > +

Re: Bug#903880: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 02:36:17PM +0200, Dashamir Hoxha wrote: >On Mon, Jul 16, 2018 at 2:21 PM Holger Levsen <[1]hol...@layer-acht.org> >wrote: > > On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > > Hmm, do you have tried to validate your shell code? >

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On 16.07.2018 14:24, Dashamir Hoxha wrote: > I have the same answer that I gave to Philipp. He has not looked close > enough to the code, and has not tried to follow its logic. > For example, error *messages* of `tar` are suppressed, not the errors > themselves. The result of the command is

Re: Bug#903880: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 2:21 PM Holger Levsen wrote: > On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > > Hmm, do you have tried to validate your shell code? > > https://www.shellcheck.net/ > > I just pasted > > https://raw.githubusercontent.com/dashohoxha/pw/master/src/pw.sh

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 1:02 PM Chris Lamb wrote: > Hi Holger, > > > please *dont* sponsor this until Dashamir has addressed the concerns > > pointed out in > > > https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-225b-f492be2d2...@t-online.de > > (I've added a link to this thread on

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 12:34 PM Holger Levsen wrote: > On Mon, Jul 16, 2018 at 05:56:39AM +0200, Dashamir Hoxha wrote: > > I just uploaded it: https://mentors.debian.net/package/pw > > Please review and sponsor it. > > please *dont* sponsor this until Dashamir has addressed the concerns >

Re: Bug#903815: ITP: pw -- A simple command-line password manager

Hi, rather than trying to appeal to authority like Marc - I could have been wrong -, I will point out that my first point was not actually addressed at all: ++ mktemp -d /dev/shm/pw.sh.X + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 [...] + decrypt /home/pkern/.pw/pw.tgz + local

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > Hmm, do you have tried to validate your shell code? > https://www.shellcheck.net/ > I just pasted > https://raw.githubusercontent.com/dashohoxha/pw/master/src/pw.sh into > and got quite a lot of problematic remarks. I've also

Re: Bug#903815: ITP: pw -- A simple command-line password manager

I just found this message in Spam, so I did not ignore it intentionally. On Sun, Jul 15, 2018 at 11:47 PM Simon McVittie wrote: > On Sun, 15 Jul 2018 at 12:07:30 +0200, Dashamir Hoxha wrote: > > Either you did not look close enough to the code, or you are not > > an expert on bash scripting

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, 15 Jul 2018 12:07:30 +0200, Dashamir Hoxha wrote: >All your assertions/assumptions are wrong. >Either you did not look close enough to the code, or you are not >an expert on bash scripting (bash is a bit cryptic and difficult >to understand even for experts). Kindly inform yourself about

Re: Bug#903815: ITP: pw -- A simple command-line password manager

Hi Holger, > please *dont* sponsor this until Dashamir has addressed the concerns > pointed out in > https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-225b-f492be2d2...@t-online.de (I've added a link to this thread on mentors.debian.net) Regards, -- ,''`. : :' : Chris

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 05:56:39AM +0200, Dashamir Hoxha wrote: > I just uploaded it: https://mentors.debian.net/package/pw > Please review and sponsor it. please *dont* sponsor this until Dashamir has addressed the concerns pointed out in

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 1:02 PM wrote: > > Nonetheless, I don't have any opinion about pw. I use pass, and I think > that forks are welcomed. > I just uploaded it: https://mentors.debian.net/package/pw Please review and sponsor it. Adrien >

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, 15 Jul 2018 at 12:07:30 +0200, Dashamir Hoxha wrote: > Either you did not look close enough to the code, or you are not > an expert on bash scripting (bash is a bit cryptic and difficult > to understand even for experts). You are right to say that shell scripting (for bash or for Bourne

Re: Bug#903815: ITP: pw -- A simple command-line password manager

Am 15.07.18 um 12:07 schrieb Dashamir Hoxha: > All your assertions/assumptions are wrong. > Either you did not look close enough to the code, or you are not > an expert on bash scripting (bash is a bit cryptic and difficult > to understand even for experts). Hmm, do you have tried to validate

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 11:31 AM Philipp Kern wrote: > On 15.07.2018 10:42, Dashamir Hoxha wrote: > > Description: > > A simple command-line password manager that keeps passwords inside a > > gpg encrypted tgz archive. The content of the archive is a directory > tree > > with a file for

Re: Bug#903815: ITP: pw -- A simple command-line password manager

On 15.07.2018 10:42, Dashamir Hoxha wrote: > Description: > A simple command-line password manager that keeps passwords inside a > gpg encrypted tgz archive. The content of the archive is a directory tree > with a file for each password entry. The first line of the file is the > password,

Bug#903815: ITP: pw -- A simple command-line password manager

Package: wnpp Severity: wishlist Closes: #903814 Description: A simple command-line password manager that keeps passwords inside a gpg encrypted tgz archive. The content of the archive is a directory tree with a file for each password entry. The first line of the file is the password, and