Skip to main content

Tag

Gnupg

Manage your passwords with password-store
Life

Manage your passwords with password-store

Hello everyone, lately I’ve decided not to use the password manager offered by all major browsers nowadays, but instead try to manage all my passwords using some open source software in order to have a better control over my passwords. I’ve decided to write this article after reading this blog entry by AlienBob where he speaks of KeepassXC, and since I’ve used it, I wanted to give a valid alternative to some downsides that I’ve stumbled upon while using it. The first approach I’ve attempted, as I said, was using KeepassXC, quoting their website: KeepassXC website What I did was install keepassXC on my Slackware64-current, export all my passwords from my main browser, save them as CSV and import them inside keepassXC. Now I have to remember just one password to access my database and I can install the browser integration add-on for chromium (or firefox) to have all my passwords readily available. Neat!! To share my passwords between my devices, I simply made a private git repository on my server and synced the password database with it. I then went and installed KeePassDroid, which is an Android implementation of keepassXC. Since keepassdroid doesn’t sync automatically from a remote server, I had to use git on my phone to pull/push to my remote in order to keep the password database up to date, and even if that’s not a big deal, I wasn’t happy with my password workflow so, while still using this approach, I was looking for alternatives.

Read more
Vulnerabilities for PGP and emails
Life

Vulnerabilities for PGP and emails

following a series of tweets from the Electronic Frontier Foundation, I’m reblogging their article to give it even more visibility on a topic that many don’t seem to know, which is email encryption. A group of researchers has found out and published a series of vulnerabilities affecting the use of PGP for email encryption (you can read more in depth coverage on this topic on the EFF website) From what I understand the problem is related to those plugins that rely on PGP or GnuPG to automatically decrypt emails. This vulnerability could allow an attacker to read not only an encrypted message but even older messages encrypted with the same key.

Read more