Re: my dumb mistake

2019-01-15 Thread Ben Oliver
On 2019-01-15 21:58:37, Aleksei Fedotov wrote: Git would have not protected you from the case you described, but it protects you from losing data and makes all changes traceable and reversible. I think it would have, because it makes the commit when you close the=20 editor. So the password he

Re: Question about pass

2018-12-08 Thread Ben Oliver
On 18-12-08 10:42:09, Paul Schwendenman wrote: You can just run pass init again with the correct list of gpg keys From the man page: ... This command must be run first before a password store can be used. If the specified /gpg-id/is different from the key used in any existing files, these

Re: Use password-store with weechat

2018-11-26 Thread Ben Oliver
On 18-11-26 13:55:21, pablo1+p...@mailbox.org wrote: Hello, I was wondering if someone has found a way to integrate pass in weechat. Weechat's config doesn't allow to sepecify external programs to be run. There is a issue on the github page (https://github.com/weechat/weechat/issues/141) for

Re: What to do when someone leaves a team?

2018-11-08 Thread Ben Oliver
On 18-11-08 12:41:36, Kevin Lyda wrote: You should assume they have all the passwords in pass. So you'd want to remove their gpg key - I think you just do that with git init and then a list of the gpg id's you want to keep. Then you need to change all your passwords. Kevin Agreed, it's the

Re: Case sensitivity in passmenu

2018-07-16 Thread Ben Oliver
On 18-07-15 16:45:19, Paul wrote: I do this already with my passmenu fork (in addition to a few other changes, like removing arrays to make it POSIX sh). Might be worth making a PR? I haven't had much feedback either way tbh. Few people here and there said they wouldn't mind but don't care

Case sensitivity in passmenu

2018-07-06 Thread Ben Oliver
Is it worth adding an -i flag to the dmenu command in passmenu? This would make the script case-insensitive. What do people think? signature.asc Description: PGP signature ___ Password-Store mailing list Password-Store@lists.zx2c4.com

Re: Get n, n1, n2 from password

2018-06-29 Thread Ben Oliver
On 18-06-29 11:37:04, Steve Harriss wrote: Is there any value in enabling pass to get just 3, or more, specific characters from a password and just displaying them? A lot of banking sites now ask for specific numbered characters and, in a longer password it can be challenging to get the 6th,

Re: Security Vulnerability: Faulty GPG Signature Checking

2018-06-15 Thread Ben Oliver
On 18-06-16 01:53:52, Steve Gilberd wrote: One other thought regarding the choice of language. I personally keep a copy of pass stored *inside my pass git repository*, so that I can still easily use it on systems where pass is not installed without adding too many extra steps. Bash is

Re: Security Vulnerability: Faulty GPG Signature Checking

2018-06-15 Thread Ben Oliver
On 18-06-16 01:11:51, Steve Gilberd wrote: I feel the same - the simplicity of it, and the ability for me to easily audit the source code, are significant reasons for my choosing *pass* as my password manager. I feel quite strongly that it should remain both simple / small, and ideally still

Re: Security Vulnerability: Faulty GPG Signature Checking

2018-06-15 Thread Ben Oliver
On 18-06-15 09:16:27, Volkan Yazıcı wrote: I see the point of replacing bash with another programming language, that being said, I feel the urge to say something about this without falling into the trap of ranting about programming languages. One of the key points of pass that was really the

Re: Security Vulnerability: Faulty GPG Signature Checking

2018-06-14 Thread Ben Oliver
On 18-06-14 19:49:56, Tobias Girstmair wrote: Thanks for this update -- very much appreciated. :-) A few thoughts below. On Thu, Jun 14, 2018 at 05:09:35PM +0200, Jason A. Donenfeld wrote: Our recommendations for authenticity and integrity continue to be to enable git commit signing, which

Re: efail and pgp/gpg

2018-05-21 Thread Ben Oliver
On 18-05-21 12:07:30, Vlad Nastasiu wrote: Hello, I have a noob question: does the efail vuln affects password store in any way? https://efail.de/ I am by no means an authority on it but from what I gather it's a problem with how Mail Clients read HTML. Shouldn't be an issue with pass.

Re: Is there any approach to use pass to share credential in the team?

2018-01-29 Thread Ben Oliver
On 18-01-29 15:39:36, tiger peng wrote: Hi All, I like the simplicity of password store, and am looking for more advanced usage of password management. As Ops team, we have many credentials should be shared within the team as well possibly share some of the credentials to external teams, such

Re: question on security

2018-01-28 Thread Ben Oliver
On 18-01-28 10:25:31, Greg Minshall wrote: hi. thanks very much to the responsible parties for password-store, which i'm happily using on lubuntu. i'm attracted to somehow synchronizing with my iphone. the solution (that i've seen) uses git for synchronizing. this tickles something that's