Re: [pass] lastpass2pass importer script

2012-10-07 Thread Jason A. Donenfeld
On Sun, Oct 7, 2012 at 6:20 AM, Alex Sayers wrote: > > Hi Jason, > > I've written a script which feeds on the CSV data exported by LastPass > and creates corresponding entries using Pass. I imagine it might be of > use to some, and it's fairly sturdy, so I've put it online at > https://github.com/

Re: [pass] lastpass2pass importer script

2012-10-07 Thread Jason A. Donenfeld
>From your script: > puts "These probably occurred because an identically-named record already > existed, or because there were multiple entries with the same name in the csv > file." and earlier: > IO.popen("pass insert -m '#{r.name}' > /dev/null", 'w') do |io| If you use the -f option, it w

Re: [pass] [PATCH] Added functionality to retrieve username from a password file and copy to clipboard.

2012-10-09 Thread Jason A. Donenfeld
On Sun, Oct 7, 2012 at 9:35 PM, ged wrote: > This requires a multiline password file with a line for the user as follows: > > user: FredFlintstone > > Case is ignored. Field seperator is ": " and everything after the field > seperator is treated as the username. > Hi Ged, Generally, we're tryin

Re: [pass] lastpass2pass importer script

2012-10-09 Thread Jason A. Donenfeld
On Mon, Oct 8, 2012 at 2:57 AM, Alex Sayers wrote: > I made some changes and pushed them to > https://github.com/asayers/lastpass-importer/. Namely: > - relicensed to GPLv2+ > - added -f command-line flag > - added -d DEFAULT_GROUP flag > Please reply on-list if possible.

Re: [pass] lastpass2pass importer script

2012-10-09 Thread Jason A. Donenfeld
> On Mon, Oct 8, 2012 at 2:57 AM, Alex Sayers wrote: >> I made some changes and pushed them to >> https://github.com/asayers/lastpass-importer/. Namely: >> - relicensed to GPLv2+ >> - added -f command-line flag >> - added -d DEFAULT_GROUP flag Merged: http://git.zx2c4.com/password-store/commit/?i

Re: [pass] Mobile applications

2012-10-09 Thread Jason A. Donenfeld
On Tue, Oct 9, 2012 at 11:59 AM, Tim Rogers wrote: > Has anyone begun to think about the possibility of making mobile > applications for use with Pass? I'd say it's a fairly essential feature > these days and it's definitely one of the selling points of solutions like > 1Password and LastPass and

Re: [pass] Chrome Extension

2012-10-09 Thread Jason A. Donenfeld
On Tue, Sep 11, 2012 at 9:07 PM, Jason A. Donenfeld wrote: > On Sat, Sep 8, 2012 at 11:03 PM, Marcus Breese wrote: >> So, I'm the guy that was talking about a Chrome extension. >> >> I'm not quite sure how to do a lot of the Chrome parts, but it should be >&

Re: [pass] [PATCH] Added functionality to retrieve username from a password file and copy to clipboard.

2012-10-12 Thread Jason A. Donenfeld
Ged -- Milki & Rephorm are pretty on par with how things roll. I think for schema-oriented workflows, you can make a wrapper or an alias around pass, but generally, what they're proposing works really well for a lot of folks -- give it a try. Jason ___

Re: [pass] symmetric key encryption

2012-10-15 Thread Jason A. Donenfeld
Use proper keys. There is added security because you don't only need a "knows something" (the passphrase), but there's also a "has something" (the key file). There is also the added benefit of being able to insert without having to enter a password. Plus, gpg-agent. Plus, this handles passphras

Re: [pass] symmetric key encryption

2012-10-15 Thread Jason A. Donenfeld
On Tue, Oct 16, 2012 at 2:03 AM, milki wrote: > > > In order to support symmetric keys then, pass would need to specify > symmetric key encryption when it encrypts the file. I don't believe it > would need anything different for decryption. This doesn't sound hard to > do. No, not hard, but not

Re: [pass] [ANNOUNCE] pass iOS app (v0.0.1)

2012-10-16 Thread Jason A. Donenfeld
Brian, You are completely amazing. Thank you! WOW! This is awesome. How about a screenshot? I'll definitely link to this from the main pass site. Jason ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listinfo.cgi/p

Re: [pass] problems with gpg and password store

2012-10-16 Thread Jason A. Donenfeld
Perhaps you have a signing-only key, but not an encrypting key? Try making a new key with gpg --gen-key and choosing RSA. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listinfo.cgi/password-store-zx2c4.com

Re: [pass] [PATCH] Do not interpret backslashes when reading passwords

2012-10-16 Thread Jason A. Donenfeld
A perfect commit: excellent. Thanks a lot for this, and good catch. Applied upstream: http://git.zx2c4.com/password-store/commit/?id=8c46958d559d6fbb852f341f0fc2d5d60127ed91 ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4

[pass] [ANNOUNCE] pass 1.4.2

2012-10-18 Thread Jason A. Donenfeld
Hi guys, This is a super tiny trivial release, but as things have settled down on the mailing list for a bit, I figure I'll release a handful of assorted bug fixes: - On insert, no-echo mode is now default, with the --echo mode to turn on echoing of passwords. - Cosmetic changes with the tree dis

Re: [pass] I can't make work the zsh autocomplete

2012-10-31 Thread Jason A. Donenfeld
On Wed, Oct 31, 2012 at 7:00 PM, Santiago Borrazás wrote: > I tried to make it work by doing 'source pass.zsh-completion' but it doesn't > work. I tried the completion for bash and works well. I'm not a zsh user, but IIRC, you don't source completion scripts. Instead you copy that script to /usr/

Re: [pass] password-store & gpg?

2012-12-02 Thread Jason A. Donenfeld
Hi Paul, Please send these sorts of things to the pass mailinglist in the future. IIRC, we ran into some issues with particular options only being available with gpg2 that we wanted, as well as gpg2's relationship to the tty. If I'm mistaken, are you able to confirm that all gpg2 invocations in

Re: [pass] kedpm conversion script

2012-12-02 Thread Jason A. Donenfeld
On Sat, Dec 1, 2012 at 12:47 PM, Jeffrey Ratcliffe < jeffrey.ratcli...@gmail.com> wrote: > > Yes. You can export undecrypted xml from fpm2, which is what fpm2pass expects. Jeff -- So is Antoine's script redundant? Or is there anything you can add from his into yours? Or should I add his to the re

Re: [pass] Multiple keys per repo

2012-12-02 Thread Jason A. Donenfeld
Hi David, This is a cool idea. I'd be up for considering it, if we can get the code minimal and simple enough. Right now it's a bit large and there are a couple of issues: +set_gpg_id() { + if [[ -f "$1/.gpg-id" ]]; then + ID="$(head -n 1 "$1/.gpg-id")" + return 0 + else + if [[ "$(dirn

Re: [pass] I can't make work the zsh autocomplete

2012-12-02 Thread Jason A. Donenfeld
ow if you have any concerns. > > Best regards, > @sanbor > > > On Thu, Nov 1, 2012 at 1:24 AM, Jason A. Donenfeld wrote: >> >> On Wed, Oct 31, 2012 at 7:00 PM, Santiago Borrazás >> wrote: >> > I tried to make it work by doing 'source pass.zsh-complet

Re: [pass] I can't make work the zsh autocomplete

2012-12-02 Thread Jason A. Donenfeld
h > https://github.com/robbyrussell/oh-my-zsh/pull/1386 > > I just had to copypaste the script :o) > > Please let me know if you have any concerns. > > Best regards, > @sanbor > > > On Thu, Nov 1, 2012 at 1:24 AM, Jason A. Donenfeld wrote: >> >> On Wed, Oc

Re: [pass] kedpm conversion script

2012-12-02 Thread Jason A. Donenfeld
Hi Antoine, Seems reasonable to me. Added to the repo: http://git.zx2c4.com/password-store/tree/contrib/kedpm2pass.py I'll put a link on the project page to it now. Jason On Sun, Dec 2, 2012 at 9:50 PM, Antoine Beaupré wrote: > On 2012-12-02, Jason A. Donenfeld wrote: > > On Sa

Re: [pass] password-store & gpg?

2012-12-02 Thread Jason A. Donenfeld
Paul, Can you confirm that you do in fact have gpg1? For example, on my computer /usr/bin/gpg is gpg2: zx2c4@Thinkpad ~ $ gpg --version gpg (GnuPG) 2.0.19 Jason On Sun, Dec 2, 2012 at 10:51 PM, Paul Wise wrote: > On Sun, 2012-12-02 at 17:13 +0100, Jason A. Donenfeld wrote: > > >

Re: [pass] why copy to clipboard?

2012-12-05 Thread Jason A. Donenfeld
Hi Antoine, Xterm supports pasting from the ordinary clipboard, not just from the primary selection buffer. Consult the documentation -- it's in there somewhere. Let me know what you find. That said, I understand some neckbearded types of folks love the traditional X11 flow of middle-clicking and

Re: [pass] I can't make work the zsh autocomplete

2012-12-09 Thread Jason A. Donenfeld
Thanks Santiago! ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listinfo.cgi/password-store-zx2c4.com

Re: [pass] prevent generating over existing

2012-12-18 Thread Jason A. Donenfeld
On Wed, Dec 19, 2012 at 4:46 AM, Roman Shtylman wrote: > > Is there a way to prevent pass from generating passwords over an existing > password? I find that when I have added several lines to a password file (to > save additional info) and I run the generate command, those lines are lost. > Thi

Re: [pass] Convert from individual to group/team key

2012-12-25 Thread Jason A. Donenfeld
Hi Daniel, I don't usually like to copy my private key all over the place. Group keys are a good way of doing this. The gpg commands for making that happen are kind of odd. I was confused too at first. But, take a look at ~/.gnupg/gpg.conf. There should be comments in there that let you make a gr

Re: [pass] pass edit: infinite loop

2012-12-30 Thread Jason A. Donenfeld
On Sun, Dec 30, 2012 at 5:22 AM, Brian Mattern wrote: > > I can't think of a case where encryption would succeed the second time > after failing the first. Perhaps we should replace this loop with a > warning and an option to print the password contents to screen before > exiting? I thought about

[pass] Script to import from the Revelation password manager

2013-01-13 Thread Jason A. Donenfeld
Hi Em, We're not much of a github project -- more of the mailing list patch kind of workflow. But thanks a bunch for the script -- I'd be happy to merge it into the contrib dir. Can you relicense it as GPLv2+? Thanks, Jason On Sun, Jan 13, 2013 at 11:40 PM, Emanuele Aina wrote: > Here's a scri

Re: [pass] Script to import from the Revelation password manager

2013-01-18 Thread Jason A. Donenfeld
On Fri, Jan 18, 2013 at 11:26 AM, Emanuele Aina wrote: > Any news for the patch? Committed here: http://git.zx2c4.com/password-store/commit/?id=a9f34015d3121cfcdfdae3bba69f25a7460520b5 File here: http://git.zx2c4.com/password-store/tree/contrib/revelation2pass.py

Re: [pass] password-store & gpg?

2013-01-18 Thread Jason A. Donenfeld
Hi Paul, I'm confident there were some issues using gpg1. I'll try to triage them this weekend, and report back on what they were, so we can figure out how to work around it. Sorry for the delay. Jason ___ Password-Store mailing list Password-Store@list

Re: [pass] Fixes to keepassx2pass.py script to handle empty passwords and entry names containing slash ('/') characters (take 2)

2013-02-12 Thread Jason A. Donenfeld
Juhamatti -- I believe you have commit access to the keepassx script. If Von's patch looks good to you, go ahead and commit it. On Tue, Feb 12, 2013 at 4:08 AM, Von Welch wrote: > I believe attachment on my last email got scrubbed, including inline this > time. Your attachment on the other em

Re: [pass] HTML5 offline "pass" reader app

2013-02-15 Thread Jason A. Donenfeld
Totally awesome! On Fri, Feb 15, 2013 at 10:24 PM, Walter Cacau wrote: > Hello pass community, > > My name is Walter and I started using the "pass" utility a few weeks ago and > it is pretty awesome. > > I started implementing a HTML5 offline webapp to read the files generated by > "pass" so I co

Re: [pass] Make show/ls/list follow links

2013-02-22 Thread Jason A. Donenfeld
On Sat, Feb 23, 2013 at 12:45 AM, Marvin Killing wrote: > Since I prefer to use Dropbox instead of git to sync my passwords, I > created some links to my Dropbox in .password-store/. > `pass show` did not follow these links when listing passwords. > > I think this is a use case that should be hand

Re: [pass] Make show/ls/list follow links

2013-02-22 Thread Jason A. Donenfeld
Hey Marvin, Just got home and I merged your patch. Tree _should_ follow symlinks, because it could be useful for some circumstances. At the moment, I can't see any drawbacks to enabling this. Anybody on the list see any potential issues? Brian? That said -- yes, if you are sharing your password s

Re: [pass] Fixes to keepassx2pass.py script to handle empty passwords and entry names containing slash ('/') characters (take 2)

2013-02-23 Thread Jason A. Donenfeld
http://git.zx2c4.com/password-store/commit/?id=5afc207d28f290936dca8fcdcab3157d3056379a Committed. Juhamatti -- let me know if this is alright; it's your script. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listin

Re: [pass] Re-encrypting password-store

2013-03-20 Thread Jason A. Donenfeld
On Thu, Mar 21, 2013 at 2:18 AM, Simon KP wrote: > A quick question - how would I go about changing a private key for the > entire password-store as to re-encrypting all the password files. pass init --reencrypt newkeyid ___ Password-Store mailing list

Re: [pass] import counterpane?

2013-03-27 Thread Jason A. Donenfeld
David, Are you interested in including this in the pass contrib directory under GPLv2+ as gorilla2pass.rb? Jason On Wed, Mar 27, 2013 at 2:30 PM, David Sklar wrote: > Faced with the desire to import from password gorilla a little while > ago, I did the following: > > 1. Made a small TrueCrypt

Re: [pass] import counterpane?

2013-03-27 Thread Jason A. Donenfeld
On Wed, Mar 27, 2013 at 3:04 PM, David Sklar wrote: > I am slightly embarrassed at the code quality at this point but perhaps > contributing it is the best way to see it improved. I have no problem > contributing it under GPLv2+ as you suggest. Great. http://git.zx2c4.com/password-store/tree/co

Re: [pass] Suggested documentation clarification

2013-03-27 Thread Jason A. Donenfeld
Hey Zach, There's a section titled "Data Organization & Migrating to Pass" here -- http://zx2c4.com/projects/password-store/#organization . In authoring this, however, I face a certain disability -- since I created pass, I don't intimately know how difficult it is for others to apprehend, and thus

Re: [pass] Suggested documentation clarification

2013-03-27 Thread Jason A. Donenfeld
On Wed, Mar 27, 2013 at 8:13 PM, Zachary Drew wrote: > -Adding "username" explicitly to the existing example? That way searching > for text within the page would find it. ✓ > -Split that section up into two sections "Data Organization" and "Migrating > to Pass" and add the "Data Organization" sec

Re: [pass] Specifying alternative to pbcopy/pbpaste (xclip alternatives) on MacOSX for pass inside of tmux?

2013-03-27 Thread Jason A. Donenfeld
Hi Von, The best way to use pass with OSX is via homebrew -- http://mxcl.github.com/homebrew/ . "brew install pass" This automatically merges the darwin platform specfic file , which uses pb{copy,paste} into the pass script by uncom

Re: [pass] [PATCH] Add find/search command was: [password-store] Add find/search command. (#6)

2013-04-04 Thread Jason A. Donenfeld
Hi Alexis, I'm happy to see this uses the -P feature of tree. This looks mostly good. The things it needs are a usage message / error case for no pattern input, and an addition to the man page. I'll look at getting this merged soon. Jason ___ Password-S

Re: [pass] [PATCH] Add find/search command

2013-04-04 Thread Jason A. Donenfeld
Hi Alexis, In the past I haven't been too keen on adding search functionality, as I think utilities like GNU Find are better suited, and since pass is just a standard directory tree... But lots of people want this feature, so it will land. That said, I want to figure out a way to also search dir

Re: [pass] [PATCH] Add find/search command

2013-04-04 Thread Jason A. Donenfeld
On Thu, Apr 4, 2013 at 3:40 PM, Bernardo da Costa < bernardo.da-co...@polytechnique.org> wrote: > > I would use pattern="${@// /*|*}" to avoid having both external commands > and risk of quoting-mess. Unfortunately, this does not work (Bash will > do substitution first, then only after make a singl

Re: [pass] [PATCH] Add find/search command

2013-04-04 Thread Jason A. Donenfeld
On Thu, Apr 4, 2013 at 6:28 PM, Brian Mattern wrote: > However, I've attached a patchset to tree-1.6.0 that adds a --matchdirs > option that adds pattern matching on dirs. Totally awesome. Thanks Brian. > (Including the full contents > of any dirs that match). What I had in mind was actually ju

Re: [pass] [PATCH] Add find/search command

2013-04-04 Thread Jason A. Donenfeld
On Thu, Apr 4, 2013 at 5:29 PM, Josh Cartwright wrote: > Is there a technical reason the .gpg suffix is included at all? Convention. It's nice to have a normal file system directory tree filled with files of a type you can easily recognize without using any specialized tools or the like. Further,

Re: [pass] [PATCH] Add find/search command

2013-04-05 Thread Jason A. Donenfeld
Any word from the tree people? ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listinfo.cgi/password-store-zx2c4.com

Re: [pass] [PATCH] Add find/search command

2013-04-05 Thread Jason A. Donenfeld
No problemo. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/listinfo.cgi/password-store-zx2c4.com

[pass] New Mailing List Server

2013-05-02 Thread Jason A. Donenfeld
Hey guys, Changing mailing list servers. The new list info link is http://lists.zx2c4.com/mailman/listinfo/password-store . Excuse the administrivia -- consider this a test message for the new list. Archives should be restored shortly. password-store@lists.zx2c4.com remains the email address for

[pass] New Mailing List Server

2013-05-02 Thread Jason A. Donenfeld
Hey guys, Changing mailing list servers. The new list info link is http://lists.zx2c4.com/mailman/listinfo/password-store . Excuse the administrivia -- consider this a test message for the new list. Archives should be restored shortly. password-store@lists.zx2c4.com remains the email address for

Re: [pass] Pull-Request: Keepass2 import script

2013-05-18 Thread Jason A. Donenfeld
Hi Stefan, Thanks for the contribution! I've merged it into the tree here: http://git.zx2c4.com/password-store/tree/contrib/keepass2pass.py And there's a link to it on the main pass page. Let me know how pass goes for you and if you have any tweaks or features you'd like. Jason ___

Re: [pass] [BUG?] pass allows both "x" and "x/y" bit hides "x"

2013-05-22 Thread Jason A. Donenfeld
Brian, This is a great fix. I remember this coming up a while back, and I didn't have such a simple solution for it as this one. Merged to master. I'll be releasing a new version soon with a bunch of the small tweaks that have trickled in over the last few months. Jason __

Re: [pass] [PATCH] Fix directory traversal for reencryption when $PREFIX is a symlink

2013-09-14 Thread Jason A. Donenfeld
Thanks Brian. Merged. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH 1/4] Rephrase awkward/confusing message about enabling echo during password entry.

2013-09-14 Thread Jason A. Donenfeld
My original phrasing is sort of ridiculous. Thanks for fixing this up. Merged. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH 2/4] Alias "set" to "insert".

2013-09-14 Thread Jason A. Donenfeld
On Fri, Sep 13, 2013 at 7:50 AM, Chris Down wrote: > I find myself typing "set" rather than "insert" almost every single time. > I do > not find "insert" to be intuitive since pass does not use a row-based > database. I might consider this, but it seems a bit superfluous. Does anybody else on t

Re: [pass] [PATCH 3/4] Use a glob in the pattern match instead of using two comparisons for [yY].

2013-09-14 Thread Jason A. Donenfeld
On Fri, Sep 13, 2013 at 7:50 AM, Chris Down wrote: > + [[ $response == [yY] ]] || exit 1 Clever! Merged. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH 4/4] Use bash's inbuilt arithmetic comparison instead of [[.

2013-09-14 Thread Jason A. Donenfeld
I like this, but, for whatever reason, it won't cleanly apply over the current master branch. Would you mind resubmitting this? ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] android?

2013-09-21 Thread Jason A. Donenfeld
Interestingly enough, I've been thinking about this myself, and was going to write a more comprehensive post to the list soon. IIRC, somebody had started an android app, but I'm not sure what happened to it. Right now, I've been doing: $ pass show Blah/blah | qrencode -t ANSI And just using a

Re: [pass] New version with new features

2013-12-07 Thread Jason A. Donenfeld
It's a bummer to see talk of forking, but indeed I haven't been maintain the project in the past several months, due to a lot of movement in life. However... Things have settled down. Next week is devoted to merging patches for pass, cgit, and photofloat -- three projects I've let to the side. S

Re: [pass] [PATCH] Add support for signing passwords

2014-01-17 Thread Jason A. Donenfeld
That's a neat idea! I'll try to get back in the swing of reviewing and merging password-store patches soon. You've come at a good time; I recently got back into cgit maintenance, and did a release. Next up is pass! ___ Password-Store mailing list Password

Re: [pass] Keepass import should include root-level entries

2014-01-30 Thread Jason A. Donenfeld
I'll merge this. Thanks a bunch. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] Concurrency issue with --clip

2014-03-10 Thread Jason A. Donenfeld
On Mar 10, 2014 4:28 PM, "Stephen Blott" wrote: > > > How does one submit PRs or patches to this project? Here on the mailing list with git-send-email. I've been drowning under work and thus have not merged for a while, but next week vacation begins, so I'll be making some merges and perhaps push

[pass] GPG Compression and Authenticity

2014-03-18 Thread Jason A. Donenfeld
Hi folks, Alfredo Pironti, CCd, has written me to point out two issues in pass. The first is that he believes gpg compression might reveal information relating to the entropy of the enclosed password. Commit 51f9b6888 fixes this. The second is something I've known about and considered for a long

[pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
The .gpg-id file may now have multiple keys in it, one per line. If a .gpg-id file exists inside a subdirectory, passwords inside that directory are encrypted to that/those ids. The init command has learned a -p/--path option for writing such a sub directory .gpg-id and now can take several argum

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 4:11 AM, Jan-Frode Myklebust wrote: > > Next feature request would be to allow each team to have their own git > repository, instead of having everything in the same repo.. That would > allow me to use pass for managing both work and private passwords. To have completely d

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 4:20 AM, Jan-Frode Myklebust wrote: > > > Yes, I tried something like that, but it breaks bash completion, so I > didn't think it was good enough. complete -o filenames -o nospace -F _pass yourpass complete -o filenames -o nospace -F _pass mypass > (BTW: that would als

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 4:11 AM, Jan-Frode Myklebust wrote: > > Next feature request would be to By the way, any review and second-pair-of-eyeballs on the patch posted above would be much appreciated. I don't want to break anything or go with a subpar design, so I'm open to all suggestions in how

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 7:01 AM, Josh Cartwright wrote: > > > How do you deal with getting all the team's public keys to all the > users? Or is that outside the scope of this patch? > > Perhaps instead of maintaining a .gpg_id key list, a keyring with the > teams' public keys should be used. > S

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 12:31 PM, Brian Shore wrote: > > > I don't understand the intended use of PASSWORD_STORE_KEY. What is > the use case for over-riding the .gpg-id contents? > This was used inside bash aliases for team pass before I wrote the code of this patch. > > Also, I don't see any r

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 11:38 AM, Brian Shore wrote: > On Wed, Mar 19, 2014 at 10:06 AM, Jan-Frode Myklebust > wrote: > > I agree it's a pain to distribute, and change keys, but am uncertain > about if I'd want to blindly trust a keyring distributed together with the > password store. Actually, e

[pass] [PATCH v2] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
The .gpg-id file may now have multiple keys in it, one per line. If a .gpg-id file exists inside a subdirectory, passwords inside that directory are encrypted to that/those ids. The init command has learned a -p/--path option for writing such a sub directory .gpg-id and now can take several argum

Re: [pass] [PATCH] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 4:36 PM, Josh Cartwright wrote: > > > I don't think any of this realpath nonsense is necessary at all. Instead > of > tacking '/..' to the end of current, just use a parameter expansion to > strip > off '/*'. Since you know that 'current' will always have "$PREFIX" as a >

Re: [pass] [PATCH v2] Team pass: enable multiple keys and per directory

2014-03-19 Thread Jason A. Donenfeld
ks for doing this; I really appreciate it. If you'd like to read through the entire pass source <http://git.zx2c4.com/password-store/tree/src/password-store.sh> and critique the hell out of it, I'd be even more appreciative. > > > On 2014-03-19 17:04, Jason A. Donenfeld w

[pass] [PATCH] Do not race on clipping.

2014-03-19 Thread Jason A. Donenfeld
We use a simple pid lock file, and if another pass instance is going to restore the clipboard, we simply restore to blank. --- This is untested. Before I spend the time debugging this, what do you think of the approach? I know there were some opinions on the list about just restoring the clipboard

Re: [pass] [PATCH] Do not race on clipping.

2014-03-19 Thread Jason A. Donenfeld
On Thu, Mar 20, 2014 at 12:02 AM, Jason A. Donenfeld wrote: > + > restore_file="${TMPDIR:-/tmp}/password-store-clipboard-restore.${DISPLAY}.pid" There's an obvious multi-user vulnerability that should be mitigated I suppose. _

Re: [pass] GPG Compression and Authenticity

2014-03-19 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 8:06 AM, Alfredo Pironti wrote: > Using git-level signature ensures integrity of the data on the remote > repository, but not of the local data. Actually it's possible to ensure before touching the git repository that the filesystem is in sync with git, and that the git si

[pass] [PATCH v2] clip: don't race between pass instances in restore

2014-03-19 Thread Jason A. Donenfeld
We now make sure a previous pass clip restore finishes immediately when copying another password to the clipboard. This is currently only implemented on Linux. --- Okay, this is a super simple way of doing it. I'm satisfied. I could use some help porting this to freebsd and darwin in src/platforms

Re: [pass] Concurrency issue with --clip

2014-03-19 Thread Jason A. Donenfeld
On Sun, Mar 9, 2014 at 10:00 PM, Michael Ren wrote: > Pass --clip spawns a subshell which sleeps for 45 seconds and then > restores the previous contents of the clipboard. If another instance of > pass --clip runs before the previous instance finishes sleeping, the > second instance will use the c

Re: [pass] GPG Compression and Authenticity

2014-03-20 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 8:06 AM, Alfredo Pironti wrote: > Using git-level signature ensures integrity of the data on the remote > repository, but not of the local data. Hence, you get protection from > attackers controlling a git repository, but not from attackers being able to > write into your h

Re: [pass] GPG Compression and Authenticity

2014-03-20 Thread Jason A. Donenfeld
On Wed, Mar 19, 2014 at 1:15 AM, Siim Põder wrote: > With this in mind (unless there is a more serious threat I'm overlooking or a > dead-simple fix in pass) your suggestion sounds appropriate. http://git.zx2c4.com/password-store/commit/?id=9ef311d868248682a11c8cb8c0177bc9949be7b9 __

Re: [pass] Allow multiple GPG keys

2014-03-20 Thread Jason A. Donenfeld
On Fri, Mar 7, 2014 at 12:28 PM, Michael Howe wrote: > Having it managed by git. The obvious use-case here being for shared > password storage for a team, where you want to ensure that adding a new > key (or removing an old one) means everyone's config is updated > automatically. Relying on indi

Re: [pass] passmenu, a dmenu frontend for pass

2014-03-20 Thread Jason A. Donenfeld
On Thu, Mar 6, 2014 at 8:28 PM, Chris Down wrote: > To scratch my own itches, I made a tiny program called passmenu[0] that > allows me to copy passwords using dmenu. > > This means you no longer have to open up a scratchpad to copy a password > (which at least for me comprises 99% of my use of pa

Re: [pass] I had to change GPG="gpg" to GPG="gpg2"

2014-03-20 Thread Jason A. Donenfeld
Pass requires gpg2. I think. If you can demonstrate to me that all code paths use no gpg2-specific features, I'll make it support both. But I *think* long ago I was relying on a gpg2-only argument somewhere. ___ Password-Store mailing list Password-Store@

Re: [pass] [PATCH] Allow selection to be overriden by $SELECTION

2014-03-20 Thread Jason A. Donenfeld
Implemented: http://git.zx2c4.com/password-store/commit/?id=b33b04ad48f580492fc36c7c124964b57f57c760 ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] Pass hack on Android...

2014-03-20 Thread Jason A. Donenfeld
Any updates on this? I'd love to see an Android app. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] Keepass import should include root-level entries

2014-03-20 Thread Jason A. Donenfeld
Merged: http://git.zx2c4.com/password-store/commit/?id=ae78361c1f7fb6e111e9e4f6f36788dfa4db9168 Sorry for the delay. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] Add support for signing passwords

2014-03-20 Thread Jason A. Donenfeld
Rather than signing individual passwords, I've opted to using signed git commits. This has the added benefit of preventing file-system level renames and swaps. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/l

Re: [pass] [PATCH] Fix mkdir for pass.bash-completion installation

2014-03-20 Thread Jason A. Donenfeld
http://git.zx2c4.com/password-store/commit/?id=048f5c1ac3f1dde7e882b5116a0f6af975fbe073 Merged! Thanks. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] make clipboard clear time configurable

2014-03-20 Thread Jason A. Donenfeld
http://git.zx2c4.com/password-store/commit/?id=1502330deb288cf87a706f71e2afb020dfd51061 Merged! ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] Fix argument order for mktemp

2014-03-20 Thread Jason A. Donenfeld
Merged! Thanks. http://git.zx2c4.com/password-store/commit/?id=884e9337426a6e64aa85252ac854fbbe2f4574cd ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH 1/2] Prefer bash parameter expansion over basename(1)

2014-03-20 Thread Jason A. Donenfeld
Merged,thanks. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] Follow symlinks in Zsh completion

2014-03-20 Thread Jason A. Donenfeld
Merged. Thanks! ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] fix man page bug in "generate -c" example

2014-03-20 Thread Jason A. Donenfeld
Merged! Thanks. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] Import script for pwsafe

2014-03-20 Thread Jason A. Donenfeld
Imported into contrib/. Thanks! ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [PATCH] Firefox addon

2014-03-20 Thread Jason A. Donenfeld
On Sat, Oct 12, 2013 at 9:53 AM, Johan Venant wrote: > Hello, > > I'm working on a firefox addon using pass script to retrieve login and > password to fill websites forms. Any code release of this? ___ Password-Store mailing list Password-Store@lists.zx

Re: [pass] [PATCH] Make the title field output from keepassx2pass.py more command line friendly

2014-03-20 Thread Jason A. Donenfeld
Merged. Thanks. ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] Problem detecting `getopt' on Mac OS X with MacPorts installed

2014-03-20 Thread Jason A. Donenfeld
But then we might wind up with OSX's getopt, which is non-GNU, which breaks. Other suggestions for fixing the macports issue? ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [patch] Adding a cp command.

2014-03-20 Thread Jason A. Donenfeld
Can you resubmit this with all the completions and usage/man page situations? ___ Password-Store mailing list Password-Store@lists.zx2c4.com http://lists.zx2c4.com/mailman/listinfo/password-store

Re: [pass] [patch] Adding a cp command.

2014-03-20 Thread Jason A. Donenfeld
On Sun, Sep 15, 2013 at 11:33 PM, milki wrote: > > This is similar to my proposed patch available last year: > > http://lists.zx2c4.com/pipermail/password-store/2012-September/000149.html Actually, I rather like this approach best. Overloading insert. Want to modernize it? I'll merge it. ___

Re: [pass] I had to change GPG="gpg" to GPG="gpg2"

2014-03-20 Thread Jason A. Donenfeld
On Thu, Mar 20, 2014 at 2:12 AM, Matthieu Weber wrote: > It's the --batch option, but it's needed only if you have a gpg-agent > running. I sent a patch on August 12th, 2013 Care to modernize and resubmit? ___ Password-Store mailing list Password-Store@

  1   2   3   4   5   6   7   >