Horcrux: A Password Manager for Paranoids

Post by stouset » Mon, Jun 19, 2017, 8:59 PM UTC

analogist wrote: post #107

iancarroll wrote: post #5

I am pretty sure the code is reusing IVs for AES-CTR[0] (i.e. the encryption is worthless), because it doesn't specify an IV and Node seems to derive the IV from the key.[1] This seems like a massive footgun in Node. I don't think their scheme results in different keys for each site, but I could be wrong. [0] https://github.com/HainaLi/horcrux_password_manager/blob/mas... [1] https://nodejs.org/api/crypto.html#crypto…

Wow. This is yet another example of the fatal combination of Rolling Your Own Crypto + Using OpenSSL Directly And Blowing Your Own Foot Off Because It Lets You. var cipher = crypto.createCipher('aes-256-ctr', key.toString('hex')) Besides the completely fatal error of using derived and non-unique IVs (fatal as in, if you encrypt more than 1 item with it, it is exactly as good as plaintext because any two items encrypt…

Post by kybernetikos » Mon, Jun 19, 2017, 9:14 PM UTC

pishpash wrote: post #106

kybernetikos wrote: post #60

Earlier quoted context omitted.

I recently wrote a thing for myself to let me remember one password and generate different passwords for each of my accounts. https://github.com/kybernetikos/sinkless I like it because there isn't any third party or service for me to trust, but I can still have unique complex passwords for each purpose. It feels pretty much the same as having them all in my head.

How do you deal with devices that do not support extensions?

Post by tgayton » Mon, Jun 19, 2017, 9:21 PM UTC

johnfn wrote: post #77

pitaa wrote: post #48

Earlier quoted context omitted.

What is it with banks and their annoyingly terrible "security" requirements? My old bank once sent me an email saying I had to reset my password. The email seemed legit, but upon following the link therein something didn't seem quite right. So I use another device to visit my bank's site directly. Upon trying to login, I get redirected to the same form I reached from the email link and had a sinking realization that…

One time I found I couldn't log in to my bank account online. Called them up. "Oh, we changed your username as a security measure." Oh. Wait, username??

Post by danjoc » Mon, Jun 19, 2017, 9:31 PM UTC

deno wrote: post #99

danjoc wrote: post #45

Sticking with zx2c4 pass. It is an assembly of gnupg, git, and pwgen. Trusted open source components. Works with a Yubikey (opensc and gpg-agent) to prevent private key theft via software. PassFF extension provides excellent browser integration. Android Password Store and OpenKeychain allow pass and yubikey to work on my mobile. Strong 2 factor password storage everywhere I need it. My biggest problem these days is d…

This article is about a novel technique that supplies dummy passwords on DOM level and intercepts network requests to replace them with actual secrets. This is not about protecting your master key, it’s about protecting the actual passwords from a variety of attacks, including script injection. Your comment is completely off-topic.

Post by madamelic » Mon, Jun 19, 2017, 9:43 PM UTC

kobayashi wrote: post #122

madamelic wrote: post #49

Earlier quoted context omitted.

I wish I could find the story where someone actually had this issue. Basically, the story was that a program for grad research was inserting all kinds of nasty, anti-semetic things into text and it turned out the previous grad student had poisoned the compiler which was modifying the strings and was able to re-poison it every time through something else. I forgot the exact details but it is an amazing read.

If you're able to find that, I'd love to read it.