[Gllug] password collection

[Darren Evans]

Thanks for your email.

That line of thinking usually goes if you want a secure
system then don't put it on the internet.  This is just
impractical and compromises have to be made.

It's also partly down to how well wrote the application
is, and and overall security of the system and network
it's stored on etc etc etc.

>From 1 point of view, everything is a security risk,
as i'm sure you know.

Absolutely nothing new here.

I found a couple of password managers, i'd be interested
in your technical analysis of a) the encryption they use
b) their design c) past issues d) the tradeoff

http://fpm.sourceforge.net/
http://gpasman.nl.linux.org/

Regards,
Darren

On Mon, Oct 22, 2001 at 12:46:20PM +0100, Allen Wayne wrote:
> 
> 
> -----Original Message-----
> From: tet at accucard.com [mailto:tet at accucard.com]
> Sent: 22 October 2001 08:30
> To: gllug at linux.co.uk
> Subject: Re: [Gllug] password collection
> 
> >There's a GNU application (runs under X) which allows you
> >to store passwords, upon starting this application you enter
> >1 master password then you can retrieve all of the other
> >passwords, i believe you can either copy it into your buffer
> >or select an option to display it.
> >
> >What's it called?
> 
> A security risk...
> 
> Atually that was the old version... They are have just released "An even
> greater security risk" and the beta team are currently testing "Its so
> insecure its a joke (MS Windows Version)".


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug