Re: Account Management / Shared Secret Generator

2015-06-14 Thread Dale Amon
Biggest problem you have is the vulnerability to substitution and various forms of phishing attacks. Picking good passwords using pseudo-random number generators is not easy. The target user population will not have a clue about these issues. As the adage goes, a false perception of security is

Re: Account Management / Shared Secret Generator

2015-06-14 Thread Michael Titke
On 14/06/2015 20:02, Matthew Paul Thomas wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Titke wrote on 14/06/15 15:28: On 14/06/2015 14:55, Matthew Paul Thomas wrote: ... None of this is to put you off, I'm just sketching a map of the terrain. If all you want to do is integrate

Re: Account Management / Shared Secret Generator

2015-06-14 Thread Matthew Paul Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Titke wrote on 14/06/15 15:28: > > On 14/06/2015 14:55, Matthew Paul Thomas wrote: >> ... >> >> None of this is to put you off, I'm just sketching a map of the >> terrain. If all you want to do is integrate your generator with >> what Ubuntu

Re: Account Management / Shared Secret Generator

2015-06-14 Thread Michael Titke
On 14/06/2015 14:55, Matthew Paul Thomas wrote: ... None of this is to put you off, I'm just sketching a map of the terrain. If all you want to do is integrate your generator with what Ubuntu has right now, you could port it from Scheme to a language we ship, and add a new dialog to Seahorse ...

Re: Account Management / Shared Secret Generator

2015-06-14 Thread Matthew Paul Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Titke wrote on 11/06/15 15:42: > > I propose to include my Internet account password creation scheme > into the current account / password / keychain management systems > on Ubuntu. That would be excellent! > Whenever you would like to do

Re: Account Management / Shared Secret Generator

2015-06-12 Thread Michael Titke
On 12/06/2015 12:23, Dimitri John Ledkov wrote: Just use https://lastpass.com/ works fine for me, is cross-platform, cross-browser, and cross-mobile. Looks like a lot of on-line marketing but I still was not able to find the source code. Do you really want me to buy something blindly just to

Re: Account Management / Shared Secret Generator

2015-06-11 Thread Michael Titke
On 11/06/2015 17:50, Jim Cobley wrote: Unfortunately all my own computers (Linux -- Debian, Ubuntu etc & Windows), my work computers (Debian, Windows) and Phones (Android, Symbian) all need to have all my passwords handy (on second thoughts my Android phone can't have any knowledge of all my pa

Re: Account Management / Shared Secret Generator

2015-06-11 Thread Jim Cobley
Unfortunately all my own computers (Linux -- Debian, Ubuntu etc & Windows), my work computers (Debian, Windows) and Phones (Android, Symbian) all need to have all my passwords handy (on second thoughts my Android phone can't have any knowledge of all my passwords because it is really owned, mon

Account Management / Shared Secret Generator

2015-06-11 Thread Michael Titke
I propose to include my Internet account password creation scheme into the current account / password / keychain management systems on Ubuntu. Whenever you would like to do something very very important you probably will need a new password for subscribing to a mailing list, creating another o