The site is using a startcom certificate … how ironic.
How is StartCom as a cert provider ironic?
Encryptr – Free, open-source password manager and e-wallet
31–40 of 78 posts
Re: Encryptr – Free, open-source password manager and e-wallet
#32I like this for my password manager: http://www.passwordstore.org/
It's all UNIX based and takes advantage of GPG and Git for encryption and versioning, respectively. Super lightweight, and there are various front-ends for it, including an Android app.
It's not a cloud-based solution by default, but it wouldn't be hard to set it up to git push to a central location on each update and to pull from that location down to all your end-points.
Re: Encryptr – Free, open-source password manager and e-wallet
#33Does it support self-hosting of the server part? If I could deploy it to one of my Digital Ocean servers easily, I could see it become my default (and last) password manager. I'm too small a fish for a hacker to actually hunt my own server, and even if they do... it's zero knowledge, so I think I'd be comfortable with that. Side question: does it support sharing of secured notes and credentials? even to non-encryptr…
> Does it support self-hosting...?
This was my first question too. I checked the android app, and there was no obvious configuration option for a different server.
It's open source, so at least in theory it's possible to modify it to your needs.
Also side note: Was a little disappointed to not see this on f-droid's marketplace since it is open source and hosted on github. Need to get that changed. :-)
Re: Encryptr – Free, open-source password manager and e-wallet
#34UX wins -
1. Readable typography.
2. Clean and simple flows.
3. Dedicated forms for credit cards, passwords, and notes.
UX shortcomings -
1. No way to tweak the password generator algorithm. This matters because different contexts need different things. EG mobile passwords should avoid special chars and be longer to tradeoff.
2. No way to search. In any reasonably long lived password file you will be unable to scroll through quickly enough.
3. No importer(s) for legacy password manager files.
Re: Encryptr – Free, open-source password manager and e-wallet
#35I like this for my password manager: http://www.passwordstore.org/ It's all UNIX based and takes advantage of GPG and Git for encryption and versioning, respectively. Super lightweight, and there are various front-ends for it, including an Android app. It's not a cloud-based solution by default, but it wouldn't be hard to set it up to git push to a central location on each update and to pull from that location down t…
It also supports multiple identities, so passwords can have different recipients. Good if you don't want to share everything with your phone.
The best part is that the program itself is a ~500 line shell script: https://github.com/zx2c4/password-store/blob/master/src/pass...
Re: Encryptr – Free, open-source password manager and e-wallet
#36Earlier quoted context omitted.
% shouldn't decrease the entropy, modulo of random is still random.
Entropy is maximized when the distribution probability is uniform. A biased random sequence has less entropy than the one of the same length which has uniform distribution. Here's an example from Wikipedia ( https://en.wikipedia.org/wiki/Fisher%E2%80%93Yates_shuffle#M... ) "For example, assume that your random number source gives numbers from 0 to 99 (as was the case for Fisher and Yates' original tables), and that y…
[deleted]
Re: Encryptr – Free, open-source password manager and e-wallet
#37Earlier quoted context omitted.
% shouldn't decrease the entropy, modulo of random is still random.
Entropy is maximized when the distribution probability is uniform. A biased random sequence has less entropy than the one of the same length which has uniform distribution. Here's an example from Wikipedia ( https://en.wikipedia.org/wiki/Fisher%E2%80%93Yates_shuffle#M... ) "For example, assume that your random number source gives numbers from 0 to 99 (as was the case for Fisher and Yates' original tables), and that y…
This is one of the bugs found in CryptoCat.
Re: Encryptr – Free, open-source password manager and e-wallet
#38Earlier quoted context omitted.
For 0..max random integer it depends on max and length. If max is 2^32 and 2^32 modulo charset.length = 0 it should be fine. Am I right? In our case length is 85 and it is indeed biased. Needs a pull request.
Correct, that's the edge case where it actually falls together neatly. If you're starting with a random byte and charset.length is an even power of 2, you end up with no bias. It's better to design functions like this to discard values outside of an acceptable range and try again until they generate a safe value (also, apply a & bit mask to reduce the number of retries). This allows you to accept any arbitrary charse…
This also works i guess
max = 100
length = 85
num = rand(max)
puts (num * length)/max
Re: Encryptr – Free, open-source password manager and e-wallet
#39Earlier quoted context omitted.
For 0..max random integer it depends on max and length. If max is 2^32 and 2^32 modulo charset.length = 0 it should be fine. Am I right? In our case length is 85 and it is indeed biased. Needs a pull request.
Correct, that's the edge case where it actually falls together neatly. If you're starting with a random byte and charset.length is an even power of 2, you end up with no bias. It's better to design functions like this to discard values outside of an acceptable range and try again until they generate a safe value (also, apply a & bit mask to reduce the number of retries). This allows you to accept any arbitrary charse…
In theory, haha. In practice it gives me some numbers twice more. [2001954,
1000322,
998546,
1001551,
999105,
2000886,
998760,
998705,
1000001,
998424,
1000978,
2000907,
1002097,
998786,
1000101,
998818,
1000381,
1999818,
999662,
1001260,
999531,
1000076,
Re: Encryptr – Free, open-source password manager and e-wallet
#40Does it support self-hosting of the server part? If I could deploy it to one of my Digital Ocean servers easily, I could see it become my default (and last) password manager. I'm too small a fish for a hacker to actually hunt my own server, and even if they do... it's zero knowledge, so I think I'd be comfortable with that. Side question: does it support sharing of secured notes and credentials? even to non-encryptr…
In theory, sure. Crypton.io itself is available on github and you could build your own server.
On the Encryptr app side, src/app.js uses window.crypton.host and _.port to specify the crypton endopint to connect to. I think the app store build of encryptr uses a crypton endopint at devgeeks.org.
You could just use (apache) cordova to roll your own build of the android app with app.js set to point to your preferred self-hosted endpoint.
YMMV.
Note: this is definitely a product at the MVP stage. The platform is capable of implementing data sharing, but that is not currently used by the Encryptr application.