Bug#903815: ITP: pw -- A simple command-line password manager

On 18 July 2018 at 00:00, Michael Stone wrote: > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > > > It writes to `/dev/shm` which is not disk. > > All else that's been said aside, this idea is also dangerously incorrect in > a typical configuration: the tmpfs backend will writ

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: It writes to `/dev/shm` which is not disk. All else that's been said aside, this idea is also dangerously incorrect in a typical configuration: the tmpfs backend will write to swap under memory pressure. (This is also true of the

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 04:45:58PM +0200, Philipp Kern wrote: > > Can we assume you didn't look at the code trying to follow the logic and > > you don't have the full picture? > > Can we please stop here? It takes grace to take back the request. Sure, but this email was sent before receiving that

Bug#903815: ITP: pw -- A simple command-line password manager

On 2018-07-16 15:58, Andrey Rahmatullin wrote: Can we assume you didn't look at the code trying to follow the logic and you don't have the full picture? Can we please stop here? It takes grace to take back the request. Kind regards and thanks Philipp Kern

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 4:08 PM Andrey Rahmatullin wrote: > On Mon, Jul 16, 2018 at 03:49:18PM +0200, Dashamir Hoxha wrote: > > > > > ++ mktemp -d /dev/shm/pw.sh.X > > > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > > > [...] > > > > > + decrypt /home/pkern/.pw/pw.tgz > > > > > + l

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:49:18PM +0200, Dashamir Hoxha wrote: > > > > ++ mktemp -d /dev/shm/pw.sh.X > > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > > [...] > > > > + decrypt /home/pkern/.pw/pw.tgz > > > > + local archive=/home/pkern/.pw/pw.tgz > > > > + local 'opts=--quiet --yes

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:45 PM Philipp Kern wrote: > On 16.07.2018 15:14, Dashamir Hoxha wrote: > > On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern > > wrote: > > > > rather than trying to appeal to authority like Marc - I could have > been > > wrong -, I will poin

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > ++ mktemp -d /dev/shm/pw.sh.X > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > [...] > > + decrypt /home/pkern/.pw/pw.tgz > > + local archive=/home/pkern/.pw/pw.tgz > > + local 'opts=--quiet --yes --batch ' > > + [[ -z ''

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:43 PM Andrey Rahmatullin wrote: > On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: > > > ++ mktemp -d /dev/shm/pw.sh.X > > > + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 > > > [...] > > > + decrypt /home/pkern/.pw/pw.tgz > > > + local archive=/home/p

Bug#903815: ITP: pw -- A simple command-line password manager

On 16.07.2018 15:14, Dashamir Hoxha wrote: > On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern > wrote: > > rather than trying to appeal to authority like Marc - I could have been > wrong -, I will point out that my first point was not actually addressed > at all:

Bug#903815: Bug#903880: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 02:36:17PM +0200, Dashamir Hoxha wrote: >On Mon, Jul 16, 2018 at 2:21 PM Holger Levsen <[1]hol...@layer-acht.org> >wrote: > > On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > > Hmm, do you have tried to validate your shell code? >

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 03:14:20PM +0200, Dashamir Hoxha wrote: >On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern <[1]pk...@debian.org> wrote: > > This clearly writes the unencrypted tarball out to disk. > >It writes to `/dev/shm` which is not disk. That is not a valid assumption. You

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 3:03 PM Philipp Kern wrote: > On 16.07.2018 14:24, Dashamir Hoxha wrote: > > I have the same answer that I gave to Philipp. He has not looked close > > enough to the code, and has not tried to follow its logic. > > For example, error *messages* of `tar` are suppressed, not

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 2:16 PM Philipp Kern wrote: > Hi, > > rather than trying to appeal to authority like Marc - I could have been > wrong -, I will point out that my first point was not actually addressed > at all: > > ++ mktemp -d /dev/shm/pw.sh.X > + WORKDIR=/dev/shm/pw.sh.JHasA

Bug#903815: ITP: pw -- A simple command-line password manager

On 16.07.2018 14:24, Dashamir Hoxha wrote: > I have the same answer that I gave to Philipp. He has not looked close > enough to the code, and has not tried to follow its logic. > For example, error *messages* of `tar` are suppressed, not the errors > themselves. The result of the command is checked

Bug#903815: Bug#903880: Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 2:21 PM Holger Levsen wrote: > On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > > Hmm, do you have tried to validate your shell code? > > https://www.shellcheck.net/ > > I just pasted > > https://raw.githubusercontent.com/dashohoxha/pw/master/src/pw.sh

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 1:02 PM Chris Lamb wrote: > Hi Holger, > > > please *dont* sponsor this until Dashamir has addressed the concerns > > pointed out in > > > https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-225b-f492be2d2...@t-online.de > > (I've added a link to this thread on mentor

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 12:34 PM Holger Levsen wrote: > On Mon, Jul 16, 2018 at 05:56:39AM +0200, Dashamir Hoxha wrote: > > I just uploaded it: https://mentors.debian.net/package/pw > > Please review and sponsor it. > > please *dont* sponsor this until Dashamir has addressed the concerns > pointe

Bug#903815: ITP: pw -- A simple command-line password manager

Hi, rather than trying to appeal to authority like Marc - I could have been wrong -, I will point out that my first point was not actually addressed at all: ++ mktemp -d /dev/shm/pw.sh.X + WORKDIR=/dev/shm/pw.sh.JHasAYH9zwYz1 [...] + decrypt /home/pkern/.pw/pw.tgz + local archive=/hom

Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > Hmm, do you have tried to validate your shell code? > https://www.shellcheck.net/ > I just pasted > https://raw.githubusercontent.com/dashohoxha/pw/master/src/pw.sh into > and got quite a lot of problematic remarks. I've also don

Bug#903815: ITP: pw -- A simple command-line password manager

I just found this message in Spam, so I did not ignore it intentionally. On Sun, Jul 15, 2018 at 11:47 PM Simon McVittie wrote: > On Sun, 15 Jul 2018 at 12:07:30 +0200, Dashamir Hoxha wrote: > > Either you did not look close enough to the code, or you are not > > an expert on bash scripting (bas

Bug#903815: ITP: pw -- A simple command-line password manager

Hi Holger, > please *dont* sponsor this until Dashamir has addressed the concerns > pointed out in > https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-225b-f492be2d2...@t-online.de (I've added a link to this thread on mentors.debian.net) Regards, -- ,''`. : :' : Chris L

Bug#903815: ITP: pw -- A simple command-line password manager

On Mon, Jul 16, 2018 at 05:56:39AM +0200, Dashamir Hoxha wrote: > I just uploaded it: https://mentors.debian.net/package/pw > Please review and sponsor it. please *dont* sponsor this until Dashamir has addressed the concerns pointed out in https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-2

Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 1:02 PM wrote: > > Nonetheless, I don't have any opinion about pw. I use pass, and I think > that forks are welcomed. > I just uploaded it: https://mentors.debian.net/package/pw Please review and sponsor it. Adrien >

Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, 15 Jul 2018 at 12:07:30 +0200, Dashamir Hoxha wrote: > Either you did not look close enough to the code, or you are not > an expert on bash scripting (bash is a bit cryptic and difficult > to understand even for experts). You are right to say that shell scripting (for bash or for Bourne sh

Bug#903815: ITP: pw -- A simple command-line password manager

> This is called proof by counter-example. > If you cannot do this, and if nobody else can do this, then you cannot > claim that it is not safe to use this script. This is not a valid argument. Nobody can yet prove (by example) that it is not safe to go near a black hole. But it is not safe. The n

Bug#903815: ITP: pw -- A simple command-line password manager

On Sun, Jul 15, 2018 at 11:31 AM Philipp Kern wrote: > On 15.07.2018 10:42, Dashamir Hoxha wrote: > > Description: > > A simple command-line password manager that keeps passwords inside a > > gpg encrypted tgz archive. The content of the archive is a directory > tree > > with a file for eac

Bug#903815: ITP: pw -- A simple command-line password manager

On 15.07.2018 10:42, Dashamir Hoxha wrote: > Description: > A simple command-line password manager that keeps passwords inside a > gpg encrypted tgz archive. The content of the archive is a directory tree > with a file for each password entry. The first line of the file is the > password, a

Bug#903815: ITP: pw -- A simple command-line password manager

Package: wnpp Severity: wishlist Closes: #903814 Description: A simple command-line password manager that keeps passwords inside a gpg encrypted tgz archive. The content of the archive is a directory tree with a file for each password entry. The first line of the file is the password, and