|
|
Post by pharrisire on Oct 2, 2010 7:38:08 GMT -5
In order to run KeePassPortable or PasswordSafe on BSD , it seems Mono >2.6 must be installed. Is there something already in KNOS to perform the function of PasswordSafe/Keypass? And, if so, will it allow the import of the .psafe and .kdbx files?, reason being I want to start using KNOS on secure sites and I can't remember all my passwords.  |
|
|
|
Post by Kevin McAleavey on Oct 3, 2010 3:39:06 GMT -5
In order to run KeePassPortable or PasswordSafe on BSD , it seems Mono >2.6 must be installed. Is there something already in KNOS to perform the function of PasswordSafe/Keypass? And, if so, will it allow the import of the .psafe and .kdbx files?, reason being I want to start using KNOS on secure sites and I can't remember all my passwords. I was aware of the MONO project a while ago, and decided NOT to include it in KNOS on a basis of its origin. MONO is a Microsoft dotNET clone and carries forward many of the serious security issues in Microsoft Windows. Granted, they fix them faster than Microsoft, but I had a problem with including it on a basis of security with "dotNET at any speed." We went instead with the gnome keyring which is PGP/GPG-based for password security and protection in KNOS, and that is fully supported in Evolution mail, and should be somehow supported in FIrefox as well included with KNOS. If folks want it though, the entire purpose of KNOS is to be able to provide exactly what the customer wants in a custom build now that I've explained WHY we didn't do that. As KNOS sits right now though, there are several password utilities available for Firefox as add-ons which will install into KNOS each time you boot and will allow you to shift those off to a stick for now. Play around with it - if folks want us to add MONO, I'll definitely consider it for the next build if there's demand for it. I think that our corporate type customers would want us to forgo it, but for our purposes here it might be useful to include it in the next build and see what happens. Shall I? Anyone have any other suggestions? This is what these betas are all about after all.  |
|
|
|
Post by Kevin McAleavey on Oct 3, 2010 4:18:27 GMT -5
Well ... played around with the Roboform Firefox add-on and it's definitely better than the last time I played with it. But I'm not personally impressed. So I figured I'd mention it here and ask if anyone else has any thoughts, experience or comments on Roboform or any of the other firefox add-ons available inside KNOS beta 2?
|
|
|
|
Post by pharrisire on Nov 25, 2010 9:44:43 GMT -5
Has KNOS3 the solution to this?
|
|
|
|
Post by Kevin McAleavey on Nov 27, 2010 4:55:43 GMT -5
Has KNOS3 the solution to this? Since Beta2, played with both Mono as well as literal Microsoft dotNET support. No satisfactory answer and ***WAY*** too many security issues. What we decided was that if dotNET support is required by a customer, then we'll do it under the WINE emulator and require a hard disk build and install of KNOS. Tried mono, and it's too dangerous to qualify as "safe KNOS" stuff. Sorry to say, but any software that requires that is too risky to use, and highly vulnerable to attack. |
|
|
|
Post by pharrisire on Nov 27, 2010 11:09:29 GMT -5
OK - I'll just keep on searching for
an acceptable alternative.
|
|
|
|
Post by Kevin McAleavey on Nov 28, 2010 1:48:13 GMT -5
OK - I'll just keep on searching for an acceptable alternative. As I had indicated in the response to your email to support@, the compile just finished a couple of minutes ago of the open source code for "keepassX" without any of the "dotNET" madness and it's working so far. It's fully compatible with the password database files from OSX as well as Windows and Linux. Still needs a LOT more lab testing here, but I feel pretty confident that by the time we're ready to release the next test build, we'll have Keepass in it. As far as "PasswordSafe" goes, its source code is no longer being maintained according to BSD and thus we're not considering that one at all. Given the popularity of Keepass though, we're going to try to make this work with our insane levels of security and make sure that it remains compatible with both Windows and Macs. If it passes all of our own tests, it'll be in there. Just wanted to let you know now that we've had time to seriously dig into what it required and it looks like we can make it happen. We had expected that the Gnome manager as well as GPG would have been sufficient along with our fortified encryption tools, but yes - those would be difficult for the average computer user to deal with and so this just makes sense to be in KNOS. THANKS for the suggestion! |
|
|
|
Post by pharrisire on Nov 29, 2010 11:55:48 GMT -5
Sounds Great!
KeePass it is!!
I am already ready!!!
|
|
|
|
Post by pharrisire on Nov 29, 2010 14:21:08 GMT -5
A while back I removed all traces of dotNet from my desktop - after
I had changed from KeePass1.18 to KeePass2.12
1.18 stores the password date as .kdb and 2.12 stores it
as .kdbx
2.12, as now I know, is dotNet, so when I removed dotNet 2.12 of
course no longer works. Which is not a problem except that
1.18 can not read .kdbx
Now I remember why I was using only PasswordSafe.
There is a plug-in listed for KeePass to import directly from PasswordSafe, but it did not work for me - I think it was for
an earlier version of PS.
I don't like the idea of exporting the PS database into plain text
which M$ might remember and blab to the universe, so I'll just
do one at a time transfer, THEN I'll be ready!
Just in time for the next beta!!
|
|
|
|
Post by Kevin McAleavey on Nov 29, 2010 22:44:44 GMT -5
A while back I removed all traces of dotNet from my desktop - after I had changed from KeePass1.18 to KeePass2.12 1.18 stores the password date as .kdb and 2.12 stores it as .kdbx 2.12, as now I know, is dotNet, so when I removed dotNet 2.12 of course no longer works. Which is not a problem except that 1.18 can not read .kdbx Now I remember why I was using only PasswordSafe. There is a plug-in listed for KeePass to import directly from PasswordSafe, but it did not work for me - I think it was for an earlier version of PS. I don't like the idea of exporting the PS database into plain text which M$ might remember and blab to the universe, so I'll just do one at a time transfer, THEN I'll be ready! Just in time for the next beta!! Heh. I think you're seeing why my "oh noes!" over the dotNET basis of their code. The cross platform version uses some QT libraries from the KDE desktop system and it was portable enough for us to use in ours under BSD. (that's actually Linux stuff) The KeePassX that we've included seems to be working nicely and will import any of those variations no sweat. So you can CHEAT if you want with KNOS if your Windows database is on the hard drive and peek in there with KNOS and use that instead of copying it all unless you want to. Our compatibility so far is perfect ... (famous last words, heh) |
|
|
|
Post by pharrisire on Nov 30, 2010 13:47:48 GMT -5
I like that idea.
The "Cheat" it is!
|
|
|
|
Post by Kevin McAleavey on Dec 3, 2010 23:33:08 GMT -5
I like that idea. The "Cheat" it is! OK ... have had time to play with the keypass thingy and it doesn't do the .kdbx - only the .kdb stuff. It allows import of XML output from other copies, but that's the only way it goes. Already coded into the next build, so though I'd let you know what's coming. It's IN there, and it works. |
|
|
|
Post by pharrisire on Dec 4, 2010 9:55:13 GMT -5
Great!
|
|
