Password Security – Solution
Thank you everyone for your input on my Password Security question. For history, here is what I requested from everyone.
The original request
I can no longer handle all the passwords I must keep in my head. I'm tired of going to my 3rd banking web site, and figuring out I've entered the password for my first bank into it, 3 times and now I'm locked out of my bank, and have to reset my password... again, which makes the problem even worse, since I can't repeat passwords.
I know that I can use Firefox to store my password for web sites, but this is insecure, as a couple clicks of the buttons in preferences, and it will display in clear text all my passwords. , and IE has an API to extract your passwords. I should note that both IE and Firefox do not store your files in the clear, and there is some level of security protecting these passwords... but I will never use those solutions ever again, and will be disabling it on all my computers.
What I want is a web browser centric password vault, that will not only save my website passwords for me, but also allow me to use it to autopopulate password fields upon request or automatically. I also have a Pocket PC Phone that I need to sync to as well.
Features
- Web Browser password filling (Firefox, and IE)
- Keep multiple computers in sync. (Laptop, Work, Home)
- Sync to the Pocket PC
The Winning Solution
RoboForm + FolderShare = TJ's Password happiness
The Long Answer
I initially started looking at KeePass, as its Open Source, runs on alot of platforms, is Free, and has alot of utilities that go with it. Sadly the Firefox requirement ruled out KeePass as my password vault, as it only has an IE pluggin. I started looking through the Firefox Add-Ons for password plugins, and found RoboForm has a really good plugin for Firefox.
In addition RoboForm keeps each of the passwords in individually encrypted files. This helps with the 2nd issue all of these solutions fall into... how do I keep my house and work, and laptop all in sync. Since RoboForm uses individual files, it makes it really easy to use sync products to keep everything upto date, with "last edit wins". For this I used a solution called FolderShare, which utilizes encrypted p2p technology to keep computers and folders you specify in sync. This has additional benefits outside of this project, but works great as I put the installer in the share, and have it sync right to the "My Documents" folder and the installer picks up the profiles and everything upon install. You do have to periodically tell RoboForm to refresh its folder list, so it sees the new files. This features is built right in and is easy, I was worried I would have to restart the client.
In addition to passwords, I am also able to create encrypted notes, that are synced to the computers. For this I have put in super useful things, like what size trashbags I need at home, what razor blades, and a list of what perscription drugs I take and their dosages.
I currently have 3 computers and one pocket pc (Moto Q) syncing right now.
Oh yeah, FolderShare has a mac client to, incase your one of those people caught up in the hype. :o)
Feedback from everyone...
Brian
KeePass + FolderShare
Doug
I use SplashId by SplashData. I have a local copy on my computer and it syncs up to my phone. It is customizable, and works well. As far as I know, it is not web based. I can update phone and it updates computer and vice-versa. Using the phone to enter data is trickier since keyboard limits etc.
Mike
I have a phone repository, but it's Palm.
Ted
I use eWallet from Ilium Software. I’ve been using it on Palm and Windows Mobile devices for years. It won’t help with populating web forms, but it’s AES encrypted and convenient since I always have my Smartphone on me.
BARD
The Password Vault – PPC (not sure about my Q though) and Desktop, 128bit encryption, access MDB files.
Password Vault – FREE, windows only, DES encryption:
Acerose Password Vault – SH-1 encryption, flat file, no DB, backup to network, no pocket PC, FREE.
Lava Software PasswordVault – 3 editions, auto import/export to web shares (I like that, but only on pro and have to buy 5 licenses at $50 each!)
Data Vis Passwords Plus – desktop and pocket PC.
KeePass Password Safe: open source, windows, no install needed, Pocket PC version.
KeePass is looking good, however the PPC version is not getting much attention – though it looks like it had some action in August.
Password Security
Calling all Geeky Friends,
I can no longer handle all the passwords I must keep in my head. I'm tired of going to my 3rd banking web site, and figuring out I've entered the password for my first bank into it, 3 times and now I'm locked out of my bank, and have to reset my password... again, which makes the problem even worse.
I know that I can use Firefox to store my password for web sites, but this is incredibly insecure, as a couple clicks of the buttons in preferences, and it will display in clear text all my passwords. <sigh>
What I want is a web based password vault, that will not only save my passwords for me, but also allow me to use it to autopopulate password fields upon request. I also have a Pocket PC Phone that I think having the passwords on that device would be a good idea as well.
So what I'm looking for is some feed back on what a good solution would be, I will make a centralized post on www.corvettepower.com and also a summary email out to everyone.
I initially was going to include everyone on the To: line, but didn't want a real long thread. Please let me know if you want to be on any follow up threads.
McDonalds Monopoly
I've been playing McDonalds Monopoly game since 1998, in an attempt to win (at that time) a Corvette. Now its just a fun game, and an excuse to eat at my favorite place to kill my body.
/mcmonopoly/index.html
When the music fades
I just got the below letter from Ron, stating that he is stopping the wednesday night game nights.
I am so bummed... I've been going to Ron's house on an almost weekly basis for close to 9 years. In so many ways, Ron's house was a weekly retreat from the stresses of work, family, and life in general. At one point I actually told Ron that game night was the happiest things that happened in my life. Through the years the group has changed and at times the "family" feel to things at the house were really strong, and some times they were bleek, but we always had a good time, and fragged some bad guys.
I know Ron is going through some big things right now in his life with work, school, and family, so it comes as no surprise that things need to stop... hopefully they will return, or maybe this is just a natural evolution of all of us growing up. Regardless I'm sad today... especially since I won't be at the last game night, nor will I be at this months game day.
There are alot of great things I take from going to Ron's... I can thank Earl for inviting me the first time, (right before he moved to Texas). I met many great fellow geeks that on different levels kept gaming part of their weekly activies. At Ron's house EVERYONE was welcome, even if you never gamed, and just wanted to play, you were welcome, and made to feel like you were part of a team, not the fresh meat to for the elite to feed on. If one team was overpowering another, we would mix up the teams so everyone had a good time.
Rons house was also the place i got to do some of the first networking ever. We wired the walls of Ron's house with more CAT-5 cable than a medium sized company at the time. Even before that, we had Steve getting old network cards working with IPXSPX and NETX so we could play some of the first network based games like Duke Nukem, Decent, and DOOM.
I guess I just need to focus on Saturday, and make those must attend events in the future. 🙁
Overall i'm in a crappy mood, and although I know this sucks for me, I know that it was no easy choice for Ron to decide to cancel things. I hope that everything is OK with him, and that he gets done what he needs to get done.
<!--break-->
==============
Greetings,
As October has fallen upon us, I have come to realize that there are limits. This is hard to say, so I’m not going to beat around the bush. I simply can’t continue hosting game nights on Wednesday nights anymore. Tonight will be our last Wednesday night game night. As difficult as this is to say, it simply has to be.
We’ll continue to have Saturday game days, although the “Saturday of the month” will be floating as need be to avoid weekends when school is in session. I know that TJ will be out celebrating his birthday on the weekend of October 14, but I hope others will be able to make it for that game day. I wish all of you the best as you pursue the goals that are near and dear to your hearts.
Game night will start at or after 6PM for one last time tonight. I look forward to seeing those who can make it tonight. Peace be with you.
Thanks,
Ron
P.S.
There’s a verse from one of my favorite songs that I wanted to share as well:
When the music fades
All is stripped away
And I simply come
Longing just to bring
Something that's of worth
That will bless your heart
WoW Addiction
Written by one of the top level players in WoW... with 7 million people playing, not all suffer this scenario. 10 hours a DAY?? Jesus. Its a good read, and helps keep things in perspective.
http://soulkerfuffle.blogspot.com/2006/10/view-from-top.html
and a counter point
http://soulkerfuffle.blogspot.com/2006/10/warcraft-another-point-of-view.html
Virtual Account Numbers
I know alot of us buy things online with our Credit Cards. And I do think alot of companies do great things to protect your privacy and secure your transactions. But with recent hacks of major servers with personal data being compromised I've started taking the need to keep my Credit Card info more private. For this reason I was really glad to see that CitiCard has a Virtual Card number applet that you can run from any web browser, and gives you a Credit Card number that is good for 1 month. I generate one for every purchase I do on the web, and have felt MUCH better about my private information remaining private.
https://www.accountonline.com/Listener
Is the applet for CitiCards.
New Camera
I just bought this great new Digital Camera.
* 6.37 MP
* 3.6X Opitcal Zoom
* Uses SD Memory
* Isn't a Canon POS
The Panasonic DMC-FX01 Digital Camera The Panasonic DMC-FX01 is a compact and stylish camera that boasts high picture quality of 6.0 million pixels, 16:9 Image Recording, a large bright, high resolution 2.5" LCD, and a wide angle 3.6x optical zoom with image stabilization The 28mm wide angle 3.6x optical zoom Leica DC lens offers a new array of photographic opportunities, such as capturing an entire group portrait at parties, or an expansive landscape or architectural scene, to enjoy the benefit of wide panoramas with real perspectives. The camera also incorporates MEGA Optical Image Stabilization and a High Sensitivity mode, which allows shooting at a maximum sensitivity setting of ISO 1600. This especially benefits indoor photography by shooting at fast shutter speeds. The DMC-FX01 incorporates the Venus Engine Plus LSI for high performance image processing, both in terms of speed and image quality, while still preserving low energy consumption. The remarkably quick AF response time, especially in the 1-point high speed AF mode, means never missing that spur-of-the-moment shot. The DMC-FX01 Is also very easy to use with a total of sixteen scene modes to assist in a wide range of photographic situations.
http://www.dpreview.com/reviews/panasonicfx01/
Torus Trooper
http://www.asahi-net.or.jp/~cs8k-cyu/windows/tt_e.html
This high speed tube type game reminds me of Tunnels an old 1991 game i used to play on my PC. Its also got a flavor of Tempest to it as well. It is free and has some good beats to it while you are playing. Pretty addictive, but not alot to it, so you play for a while and its just the same thing over and over without the levels getting to different. No time trials etc.
Check it out. :o)
Burning Man Relocation
This year they are moving the location of Burning Man about 1 mile north east and rotating the layout a bit. But for the most part everything stays the same. 🙂
We are planning on camping at 5:30 and Destiny.
Windows Live Writer
I just installed Windows Live Writer and am trying it out. As far as Microsoft Applications go its pretty flexible, and supports a lot of types of blogs. Initially written for Windows Spaces (a competitor to MySpace), the editor is able to update Microsoft's blog sites, as well as many other types and api's (Blogger, Moveable Type, Live Journal, and others). Pretty much making this tool a universal blog updater.
For me the benefit is the ability to do spell checking, because as anyone that knows me knows... I can't spell to save my life.
http://download.microsoft.com/download/f/9/a/f9a19f2d-cec4-4a25-9b0b-eb9655ea7561/Writer.msi
To use WLW against Drupal, you need to use the Custom Moveable Type setting and make the URL, utilizing your username and password.
All posts are done as personal blog entires, not as Stories. WLW reads in your existing categories from Drupal, and allows you to select them prior to uploading. So I have just started playing with it, and will be looking to use this application with our corporate blogging solution, as well as with Live Journal.
In addition to providing text, you can also insert pictures from your local hard drive that will then be uploaded into your blog via the API. Drupal supports this functionality in the latest version (4.7.1). If your Blog doesn't support it, you can also have images uploaded to a FTP site. Again, I am completely amazed at Microsoft's effort to support many different blog solutions, besides just their own.