Domain: zetetic.net
Stories and comments across the archive that link to zetetic.net.
Comments · 32
-
Re:Password manager
Which password manager do you recommend? 1Password doesn't work on my old iPad with iOS 9, so that one is ruled out. Besides, I'd rather pay for a password manager than use a free one because 'free' means: "We know exactly which websites you visit and will sell this data gladly to everybody we meet."
CodeBook is great. I've been using it since it was a Palm III app called STRIP (Secure Tool for Recalling Important Passwords. Their encryption layer is open source, and they support syncing across devices via Dropbox, Google Drive, or local WiFi. It supports TOTP 2FA and will generate Diceware/xkcd style passwords. They have clients for Windows, iOS, Android, and Mac. The desktop version also has an agent that will fill out web form fields for you.
It's not a slick as some other password managers, but it works for me. $10 per mobile platform and $20 per desktop platform you use it on.
Here's the iOS store page - says it still supports iOS 9.
-
Re:Password manager
Which password manager do you recommend? 1Password doesn't work on my old iPad with iOS 9, so that one is ruled out. Besides, I'd rather pay for a password manager than use a free one because 'free' means: "We know exactly which websites you visit and will sell this data gladly to everybody we meet."
CodeBook is great. I've been using it since it was a Palm III app called STRIP (Secure Tool for Recalling Important Passwords. Their encryption layer is open source, and they support syncing across devices via Dropbox, Google Drive, or local WiFi. It supports TOTP 2FA and will generate Diceware/xkcd style passwords. They have clients for Windows, iOS, Android, and Mac. The desktop version also has an agent that will fill out web form fields for you.
It's not a slick as some other password managers, but it works for me. $10 per mobile platform and $20 per desktop platform you use it on.
Here's the iOS store page - says it still supports iOS 9.
-
Re:Mod parent up.
Was great on my PCs where I had KeePassX, but the first time I had to enter a 24-character randomly generated password with special characters on my cellphone to log in, I realized why it will never work for the average person. Big, long complex passwords are great until you have to type them in on a tiny ass keyboard.
Zetetic's STRIP is pretty great for this. I've been using it since it was a Palm Pilot V app. They've got Windows, Mac, IOS, and Android clients. On the desktop you you can dedicate a hot key for filling in forms, although admittedly on mobile you're stuck copy/pasting. It even has an RFC6238 TOTP generator built in so you can ditch Google Authenticator. Supports syncing between devices via cloud services, local WIFI, or a designated folder.
I usually don't shill for commercial products, but I've rarely used any one piece of software for so long and been so happy with it. And while the UI is commercial, they've released the encrypted repository that backs it as open source.
-
PalmOS: Strip
If you have PalmOS, I suggest Strip. There is also an iPhone version, but I don't know that platform very well.
-
Re:Palm Pilot
-
Re:recommendations?
How about Strip?
PalmOS application that stores account info in an encrypted database so you only need to remember one password.
-
Passwords in PDA with Strip
I use Strip to keep my passwords on my PDA. The database is AES encrypted, and I've found it quite convenient. Downside is that the password generation doesn't appear to work properly with PalmOS 5. Anyone else find the same?
-
Re:recommendations?
I use Strip (http://www.zetetic.net/solutions/strip/) on my Palm PDA. Works good, and it's GPL'd.
-
Re:Pseudo-Written Password
I don't know about cryptopad, but I'm quite positive strip does it "right". I used it extensively before buying a Zaurus a little over 2 years ago and moved to zSafe.
-
Or just use a Palm Pilot
-
Anyone else use STRIP?
It's a GPL utility for PalmOS that stores your pw list encrypted with 256 bit AES. It's also got a decent password generator, and can do S/Key OTPs. Here's the site.
-
Re:My take : three zones
Best bet is to use STRIP -- Secure Tool for Remembering Important Passwords for PalmOS. I've been using it since my PilotPro days. Great tool, keeps everthing encrypted on the palm, has a master password for STRIP, forgets it when palm is turned off or switched to a different app. And its GPLed.
-
Re:My SoapboxThere are gadgets to store "safely" passwords, and fits well in a keychain. If for your company is so critical the security of the passwords, well can buy for everyone there one of such things, or just magnetic cards instead of having to write passwords (of course, both gives some phisical security concerns, but are safer than some other alternatives). Is not exactly the same, but one of the uses for my palm is just storing there hard to remember passwords protected by a master password with strip.
Also, there are also several strategies to implement one time passwords, why not change password every time you use it?
-
SecurID!I have a securid card that I use for logging into a number of different things at work. I wish it was used for *EVERYTHING*. I'd never have to remember another password in my life (unless you count my PIN as my password). I'd never have to deal with varying password changing schemes on multiple systems. Which result in having multiplying passwords which I have to remember, which require me to enter them into STRIP.
I wish I could use SecurID (or something like it) for everything. It would dramatically simplify my life.
-
Re:OTP Calculators
STRIP will store your passwords and calculate OTPs too.
-
Have a Palm?
If so, your problem's solved!
-
Re:Passwords
If you have a palm, I recommend Strip. Been using it for years.
-
Re:I love my Palm PDA
I almost forgot two more reasons I love my Palm Vx: 1. Password safe. I use STRIP, but alot of people like GPG keyring. It's really handy to have the horde of passwords I need to remember stored on my Palm, encrypted with AES and protected by my physical security (take my Palm and I beat you up.
:-) 2. The backlight in a surprisingly effective flashlight in a pinch. -
My PDA killer apps
I've had a Palm V, then replaced it with a Vx when those arrived, and now I'm seriously considering moving to a Palm m515 for the extra storage space (8MB is no longer enough; 16MB plus a 128MB MultiMediaCard should do for a little while...).
- Scheduling. My office uses one of those shared calendar systems (not Outlook), and it includes a Palm conduit. (Hey guys, ship the Palm Desktop 4.0 Mac version already!) I'm at the point in my career where meetings happen to me more often than they used to, so this matters a lot.
- E-books. Between Peanut Press (now Palm Digital Media) and Baen Books (Webscriptions, the Baen Free Library, and the War of Honor CD-ROM), I've got plenty of books to cycle through.
- Password vault. Strip is a great tool for sysadmins.
- Other reference info. Lists of IPs, machine serial numbers (handy for making service calls without having to look behind machines), etc.
-
I always write passwords in my palm
I use a little PalmOs utility to store passwords. Its name is Strip. It stores all your passwords encripted with DES or Idea encription algorithms. It's GPLes and very useful.
But don't use the password generator tool. It has a big security flaw.
---
-
Strip
There is an excellent Palm OS program called Strip from Zetetic Enterprises. It stores passwords securely using IDEA or DES encryption.
The source code is available at the site (with export restrictions). Perhaps that would help you?
-
Niggle et al.Haven't seen these mentioned here:
Niggle (Scrabble for Palm Pilot).
Tide Tool (tides at almost any location)
Strip (encrypted password saver)
Showtimes (keep local movie showings on your Palm)
All are freeware (Tide Tool and Strip are GPL), and Strip (the only one that requires regular synchronization) comes with Unix tools.
-
Re:Why Clear Text Passwords are Bad, and How to Av
Remembering many different passwords isn't that hard if you have a computer do the remembering for you. The catch is that the passwords need to be stored securely enough that you're the only person that can get to them. Someone already mentioned a Windows program that does this. I use Strip, a GPLed password-storing program for the Palm. It stores the passwords in an encrypted database (encrypted in either DES or Idea, whichever you prefer). It also has a decent random password generation feature.
--Phil (Just don't ever forget the password with which Strip's database is encrypted.) -
Re:Palm III Vs Palm V..... FIGHT!!!!
I don't know where you're getting your data.
Palm V: Cute leather cover that turns the unit on when in your pocked due to bad design!
Get PalmV ButtonGuard v2. It turns off the button interrupts so even if you press it for a week the Palm won't drain the battery any harder. Much better improvement over the AlwaysOff hack.
Also about that leather case: I've had no trouble with it. It seems to displace the force against the screen very well. You could always get a PalmV RhinoSkin. I had one for my Palm Professional. Love it. Want one for the V.
Palm III: Flash upgradable
Palm V: Nope
Winner: Palm III
My PalmV seems to be flash upgradeable. Went from 3.0 to 3.3 (I think those were the version #s), and I have about 800K of apps in flash.
Palm V: Digs into the edge of my hand and has a habit of sliding out of my hand and plummeting to the floor.
You must have a very strange way of holding it, or you hold it too tight and have sweaty palms. I've never dropped my V because of the form factor. My Palm Pro, OTOH...
Palm V: Hot Sync contacts not compatible (won't even sync on an old Palm/Palm III cradle!!!!!)
Do you want backwards compatibility with everything? You can get a small device that connects your V serial port to any III-style accessory. Can't remember the name offhand but I believe someone has already replied with the link
For me, the V won. I needed something that was sturdy ((thin) aluminum beats plastic IMO), thin (the III is a pig) and wouldn't keep eating batteries. I get about 3 weeks out of my PalmV. I use it for appointments, phone #s, a programmable calculator (sorry can't find the link, it's by Gary Desrosiers), notes (and also BrainForest), DopeWars, diagnostic platform for the equipment I design, password storage, billing... It's a well used device.
BTW: All the apps mentioned which are replacements for standard PalmOS apps use the standard databases so I don't lose compatibility. Kudos to Iambic and Standalone Software for that feature, it was a big deciding factor when I chose their products.
-
Re:That is one reason I have a PDA
Of those, my favorite is Strip. Not only does it have all the functionality I need and uses strong encryption to store the passwords, it's also GPLed.
--Phil (Always looking for GPLed Pilot programs.) -
Re:Palm Pilot
I use Strip (Secure Tool for Remembering Important Passwords)
Here is the link
It is a GPL program, and uses 96 or 128 bit block encryption of all databases (Uses the 3-way or Idea algorithms respectively). -
If you have a pilot...
...try Strip
-
Re:"Password Safe" for the Palm
The program you're looking for is Strip (Secure Tool for Recalling Important Passwords). It is a GPLed program for the PalmOS that manages usernames and passwords. It stores all of its information in encrypted form, and you must enter the correct password un decrypt it for use. I'm currently using it to keep track of all of the users at the office, since I run of the network here.
--Phil (If only there were more GPLed Pilot apps...) -
Re:MicroSoft Doesn't need WINCE.The Palm was never intended to be a replacement for a desktop computer. It's main purpose is to be an electonic diary you carry with you to synchronise with your Lotus Organizer or Claris Organizer (now called Palm Desktop), and Quicken, etc.
Admittedly, $AU800 for a Palm V is a little expensive, but I was sold on it because of a few little utilities I found on PalmGear:
- Titrax (hour tallying program)
- PocketMoney (keep track of my spending habits)
- Strip (secure storage of my passwords)
- Date Mate (make me remember birthdays!)
- DiddleBug (paint package)
- Nag Screen (really useful utility!)
The Palm is supposed to be a data logger, with the processing being done on the desktop. There's no competition between Palm and Windows (besides, I use a Mac on my desktop).
I looked at WinCE once and the interface was so familiar, I was waiting for the BSOD (or h ere). Microsoft's biggest mistake with WinCE was underestimating the emotional decision that a user makes based on previous experience with products that have the same interface (ie: Windows 95/98/NT).
That, and the fact that a Palm III can run for weeks on one set of AAA batteries. A WinCE machine runs for maybe 6 hours. However, I got the Palm V with the rechargable Lithium-Ion battery (more dollars than sense). Besides, it looks sexy :P. Next on the list is a Sony Vaio (just like Steff's) -
Re:Someone Wanna Grab that Palm Pilot?
I wrote Strip, the Password and Account manager for the Palm Pilot. I am not trying to plug the product but since its been mentioned twice already I feel more comfortable. Strip will protect against user stupidity. It encrypts EVERYTHING before it goes into the palm databases. Furthermore, if you leave it on in the back seat of the taxi it locks the program when the palm automatically powers off. Idea is the same algorithm used in PGP, so its heavily tested and secure. Its open source, so you can look at the crypto code and compile it yourself if you want to. Strip does specific and comprehensive memory wiping of unused data, so even if your would be attacker got an actual RAM image off your palm they would not find your key, or any of the data that has been displayed during Strip's use.
-
GPL program to help on Palm Pilot
Try Strip:
http://www.zetetic.net/products.html#str ip
Works good for me. Stable too. -
Re:Someone Wanna Grab that Palm Pilot?
There is another utility for the Palm called Strip at www.zetetic.net. This one uses 128bit Idea encryption so go get it. (I don't work for them or anything, I just like their tool).