Slashdot Mirror

Keepass is also (correct me if I'm wrong: I'd love to hear there is another) the only password manager I know of which is fully cross platform.

I like keepass, especially since there are so many ports of it to so many platforms. However, if someone is looking for something more akin to lastpass, here's a few open source ones:

https://clipperz.is/ - clipperz seems most similar IMO. It's open source and all in the browser via javascript, thought signup and site desire are a little wonky.

http://www.fpx.de/fp/Software/... - Password Gorilla (also on github: https://github.com/zdia/gorill...). It's also open source, but it's a TCL/TK application. I'm not sure what their andriod status is (there is some info on their site regarding use of HECL to port the TCL parts to android, but I don't know the status).

  https://www.passpack.com/ - Passpack works on chrome, firefox, ie, and safari. It's similar to lastpass in many ways. It's not fully open source, but they did open source a bunch of the libraries they use/made (aes/rindael, xxtea, json2, sha-256 in js, etc: https://code.google.com/p/pass... ).

https://www.passlet.com/ - passlet. The SSL cert for that site expired in 2010, so I don't think I'd use this, but it is cross platform and built according to the host-proof-hosting concepts. They open sourced their PBKDF2 methods: http://anandam.name/pbkdf2/

http://aaronboodman.com/halfno... - halfnote is just a notepad, but it's encrypted in browser, and it's open source (https://code.google.com/p/halfnote/)

All that said, I'd probably stick with keepass and/or lastpass.

Of the Linux versions

1) mypasswordsafe is no longer maintained

2) password gorilla is not particularly fast

3) pwsafe is still in beta

Having said that, they all seem to work fine with no major issues. The last one is the most similar to the current Windows version.

How in the world can you make that claim?

http://www.fpx.de/fp/Disney/Tales/

http://www.fpx.de/fp/Software/Gorilla/

I've tried doing using Password Gorilla since it runs on all three OS's I might use (Mac, Linux, and Win), and since it's available as a TCL script, I can keep a TCL interpreter on my USB thumbdrive along with the file.

The biggest problem I have with these things isn't the tool, as much as getting myself to actually use it. If it's not built into the browser, it's really a pain in the ass to use. In all honesty, I just keep a bunch of plaintext files containing the username and password pairs for the sites I use. It's terribly insecure, but it works for my laptop, and really, who wants to know my boingboing login anyway?

Password Gorilla is compatible, and works on OSX and other platforms.

http://www.fpx.de/fp/Software/Gorilla/

"Now Available for Microsoft Windows, Mac OS X, Linux, Solaris, *BSD, etc.
Free, Open Source Software!"

I had to address this same issue recently myself. I'm getting an increasing number of login/passwords. I won't use the same combination on any two sites and I'm in my 30s. I can't remember passwords like I could 10 years ago. For me Password Gorilla was the product that fit all of my needs.

It's Free/OSS, runs on all major platforms, can be run from a flash drive and is compatible with the Password Safe file format.

LK

Password Gorilla works on just about every platform. Password files work across platforms. And it's GPL. I've been using it for years.

And that is not to store your passwords in your browser in the first place.

What is not stored in the browser is much harder for a random web page attacker to trick your browser into turning over.

Instead, use Password Gorilla: http://www.fpx.de/fp/Software/Gorilla/ It stores your passwords for you, allows copy/paste of login id/passwords into browser entry fields, and by being independent (100%) of the browser, no browser attack will be able to leach our your passwords.

Plus, it's cross platform, windows/linux, same files, same interface.

And for those with multiple computers, it allows you to merge other password safe files from your other computers to keep things synchronized (think a "rsync" like merge of two password files). That is very handy when you need to change a PW for site X and you do so on your laptop. Then later, the change will propagate to your desktop when you do a sync/merge.

Password Gorilla!

I use Password Gorilla. It is written in Tcl/Tk and therefore is very cross-platform. They even have a .app for Mac usage! The Windows version is a standalone executable that is completely self contained so the machine that you use it on doesn't require you to install anything. It reads Password Safe password files. It's nice to have if you're on a machine that Password Safe does not support or if you cannot install software. I keep the Windows, Linux, and Mac versions on a keychain drive along with my (encrypted) password list.

If you're more the command line type, there is also pwsafe that supports the Password Safe format but allows you to add and get passwords from the command line.

One of the benefits of both of these pieces of software is that they allow you to generate completely random passwords. Completely random passwords are quite secure, and are a great way to make it a nightmare for any script kiddie to guess or crack your password. However, that leaves one passphrase that you need to remember and guard - the passphrase to your password managing program. I personally suggest Diceware as a great, truly random way to generate a completely random passphrase. You can even do it while you're away from the computer if you'd like and if you're paranoid. It's also a great way to generate passphrases for SSH keys, PGP keys, or whole-disk encryption.

In my case, I presume all my data is 'somewhere' (my servers, 3rd party websites, etc). I don't go to lengths to archive/encrypt it. But my survivors will need access to it. So this gets back to the simple question of secure username/password storage.

I use Passowrd Gorilla. One master pass, to encrypt the rest, and most of the entries have 'notes' like the URL of the applicable site or server. Of course I leave the master password with my S.O. and/or anyone who I trust not to use it till neccessary.

Lots of other projects out there for the same purpose, but I like P.G. since it does TK & Windows, isn't Net dependent, and other features like autosave.

Password Gorilla http://www.fpx.de/fp/Software/Gorilla/ is an opensource app that works on Mac, Windows and Linux and is compatible with Password Safe's database.

There is an open source tool called Password Gorilla that can help you keep track of your passwords...

If you like Password Safe, Password Gorilla uses a compatible database, and it runs on many more platforms through the use of TclTk.

Password Gorilla is also a very good Password Safe compatible client that runs on Windows, OS X and Linux.

PasswordSafe is basically a GUI wrapped around an encrypted file such as you describe. Unfortunately, it's Win32 only, but there are a few portable solutions available.

That kind of argument can potentially keep humans out of space forever. Theoretically, there will always be superior technology on the horizon, and if we always decide to wait for it, then we'll never get anywhere.

In short, there may indeed be an optimal time before which it would be pointless to colonize space, since our future selves would catch up and overtake us with better technology. But on the other hand, I doubt that we are capable of discerning exactly when this optimal time would be, so what do we do?

Will they call it a googleplex?

Since a googolplex is 10^(10^100)--one with a googol of zeros after--it'll be a rather...powerful statement.

Ow, stop throwing things at me!

Ok. (throws a final tomato at Capt. Hector's head as [s]he turns around ;) )

Just install Password Safe http://passwordsafe.sourceforge.net/ and generate a new, random 20 character password (Hash That!) for each login. If you don't like Windows-only software, there's Password Gorilla http://www.fpx.de/fp/Software/Gorilla/ (runs everywhere), My Password Safe http://www.semanticgap.com/myps/ (Linux/Qt) or pwsafe http://nsd.dyndns.org/pwsafe/ (command line).

Don't forget to use a good, long passphrase as the database's Master Password.

I'm sorry but this is fucking retarded. Why would anyone think it would be okay to sue a company named Google for using a possible variant of the un-trademarked word Googol to describe a business that creates a data searching system? If there is a connection, why doesn't dictionary.com show one in the google definition? I could see perhaps a case if Google was called Googol, but this appears to be nothing more than a cash grab by a family of broke twits. Besides, the guy didn't invent the word! His 9 year old nephew did! From that link: The american mathematician Edward Kasner once asked his nine-year-old nephew to invent a name for a very large number, ten to the power of one hundred; and the boy called it a googol.

Yeah... Too bad there is no such thing as the number Google.

There is, however, the number googol, which may be "infinite for all practical purposes", but, come on, this is Slashdot.

Without the googol, you couldn't have the googolplex, and without the googolplex you couldn't have things like this

After I took the picture, I noticed that you could get two full browser windows plus a terminal window all visible at once if you put the dock on the bottom of the screen. Stunning. I plan to buy one in a few months. Enjoy!

If you've got an Apple laptop or G4, and (in the case of the laptop) don't mind the very real headaches the conversion dongle can cause (probably not an issue with the laptop as (a) it is an Apple product itself and (b) you can use it without the monitor if need be) then by all means the 23" Apple HD monitor will likely be everything you want. They are stunning, and I considered buying one until further research revealed the proprietary interface, the external dongle, the problems people are having with interference and static on the all-digital link, and the fact that there was absolutely no guarantee it would work with an PC's DVI interface (though with the converter it should, assuming you can get the scan frequencies to line up correctly).

I opted for the 24" Samsung instead. For a few hundred extra I get another 1" in size, the ability to plug analog VGA and digital DVI into the thing (as well as composite video and s-video), and the knowledge that others had already managed to get it working with XFree.

You will save some money over the Samsung though (the Apple costs about $600 less), so if you're using it with Apple equipment it is definitely the way to go. If you're using a PC however, you are taking a risk in trying to get the Apple monitor to work (the 22" monitors work, but the 23" monitors are an unknown and I could not get a straight answer out of any of the sales reps or technical support people ... lucky for me as I discovered the Samsung a few days later, after having nearly given up on getting any kind of a big monitor in the near future).

Whichever monitor you end up with, if you're running X you'll want to make use of the very fine modeline generator attached to http://www.xfree86.org/pipermail/xpert/2001-Octobe r/012070.html
(save to a local file and use Uudeview, a command-line MIME-ware decoder, to extract the source file, compile, and you've got an easy modeline generator that takes horizontal, vertical, and refresh arguments to create useful and relatively safe modelines for unusual X resolutions like 1920x1200).

Whichever HD ready monitor you get, you are going to find yourself grinning like an idiot as you stare at an unbelievably large, crisp, and fine resolution screen. :-)