PasswordMaker Forums
Miscellaneous => Other => Topic started by: Eric H. Jung on September 16, 2006, 05:04:30 PM
-
Hi,
PasswordMaker for Firefox/Mozilla/Netscape/Flock version 1.6 beta2 has been released. You can get it here (http://passwordmaker.org/beta.html). Please note that Firefox's extension manager will report this version as 1.5.1. This is so you will automatically be upgraded to 1.6 after it's finalized. The about dialog, however, displays 1.6 beta 2.
Thanks,
Eric
-
Need some feedback. Does it work? Does it upgrade smoothly from 1.5.1, keeping auto-populate intact? I'd like to finalize 1.6 ASAP.
Thanks,
Eric
-
MAJOR bug. Can't enter new urls at all! All I see are the line to enter what url to use for hasing, and the checkbox for autopopulate.
Tested with Firefox 2 Beta 2
-
It's not a bug. The URL patterns are hidden unless you check the autopopulate checkbox. They're hidden because they don't apply unless you want autopopulate on.
-
So, when I hit coolkey, and no patterns are defined, it won't be selected?
I'm actually don't use autopopulate at all, just Cool Key.
-
So, when I hit coolkey, and no patterns are defined, it won't be selected?
What is meant by "it" in that sentence? In any case, I sort of forgot that the patterns apply to coolkey, too, not just auto-populate. With that in mind, I'll make it so the patterns are always visible--regardless of whether or not the auto-populate checkbox is selected. However, please test otherwise that everything is working as you expected. Thanks for pointing that out!
-
Err, meant to type account.
Everything else I tested works just fine. I copied my current passwordmaker.rdf file to the test profile, and it appeared to have converted the wildcards correctly.
-
Awesome. Maybe I'll wait for feedback from one other person (tanstaafl? thirbros? anyone else?) before submitting it to addons.mozilla.org with the final changes I made.
-
Awesome. Maybe I'll wait for feedback from one other person (tanstaafl? thirbros? anyone else?) before submitting it to addons.mozilla.org with the final changes I made.
Everything works fine for me here... but I don't have my old rdf file (I forgot to save my old rdf before updating on this computer) to test how the conversions works. Other than that, all sites tested work fine - and I LOVE the work done allowing the editing of URLs to match, and the integration of the pattern help.
Eric, I would say that you have outdone yourself - but I'd be wrong, you have simply continued your excellent work on the best thing to happen to the internet since broadband.
Many thanks!
-
Thanks for the compliments. 1.6 submitted to AMO at 12:40 EST 17-09-06. With any luck, they'll approve it today and everyone will get the update quickly.
-
Hi. I installed it, so far everything is fine, just one thing I don't like:
My account was converted to "*https://www.[...]foo*" which works, but the leading * isn't needed in this case. "https://www.[...]foo*" works too. Although I've never seen a phishing site yet that has https in the middle anywhere, do I guess it doesn't matter that much. Just a hint for the 2.0 release.
-
Yeah, I didn't go crazy with the conversion. I just did a basic conversion to get it working so people weren't inconvenienced when upgrading. However, if you rely on auto-populate or CoolKey heavily, you should go through your accounts manually to lock them down with more concise patterns.
-
Yeah, I didn't go crazy with the conversion. I just did a basic conversion to get it working so people weren't inconvenienced when upgrading. However, if you rely on auto-populate or CoolKey heavily, you should go through your accounts manually to lock them down with more concise patterns.
Perhaps you would be kind enough to explain that? Or perhaps you would explain more fully what happens when one installs 1.6 when the user has been using 1.5.1?
Why do I ask? Well, if one reads what you posted, it would appear that existing passwords are changed when one installs 1.6 in place of 1.5.1. If that is so, then how can one continue to use PWM?
I'm not at all certain that what you said is what you meant, but the statement about "...a basic conversion..." certainly says, at least in English (rather than `computerese') that there are some substantial changes made when updating to PWM 1.6. IF that is so, then I'd certainly want to know first what is going to happen to my existing passwords, for which I do use auto-populate and, when necessary, CookKey, and I'd want to know the details of any such changes before I update.
-
Hi John,
By "conversion", I did not mean "password conversion". I meant conversion of the old field When URL Contains to the new URL patterns (http://passwordmaker.org/help/patterns.html). Yes, the passwordmaker.rdf file is modified permanently (and not backwards-compatible with old versions of PasswordMaker) for this conversion. The conversion is as follows:
All When URL Contains fields are converted a wildcard pattern surrounded by asterisks. For example, if you have a When URL Contains field for an account defined as "mail.google.com", 1.6 converts this to the wildcard pattern "*mail.google.com*". Does that make sense?
Perhaps I should make this clear on the download page? It's important for people who use PasswordMaker on multiple PCs with a single RDF file because one you upgrade one installation, you must upgrade all.
-
Hi John,
By "conversion", I did not mean "password conversion". I meant conversion of the old field When URL Contains to the new URL patterns (http://passwordmaker.org/help/patterns.html). Yes, the passwordmaker.rdf file is modified permanently (and not backwards-compatible with old versions of PasswordMaker) for this conversion. The conversion is as follows:
All When URL Contains fields are converted a wildcard pattern surrounded by asterisks. For example, if you have a When URL Contains field for an account defined as "mail.google.com", 1.6 converts this to the wildcard pattern "*mail.google.com*". Does that make sense?
Perhaps I should make this clear on the download page? It's important for people who use PasswordMaker on multiple PCs with a single RDF file because one you upgrade one installation, you must upgrade all.
Thanks, that's much clearer--and yes, this information should be on the download page.
-
and yes, this information should be on the download page.
Done. I only wish I had done it sooner...a similar notice was on the 1.6 beta1 and beta2 page (http://passwordmaker.org/beta.html). Seems I forgot to copy it over.
-
Done. I only wish I had done it sooner...a similar notice was on the 1.6 beta1 and beta2 page (http://passwordmaker.org/beta.html). Seems I forgot to copy it over.
Thanks; I think that is a good thing. I guess some day, when I have some time (which may even be in this lifetime), I'll install 1.6, which has been downloaded and waiting for a few days until I could have this issue clarified.
-
"Sir Eric,"
As usual I am late, just noticed when the mouse is hovered over the StatusBarIcon for PWM a full list of my settings for my PassWord are shown in a Large Yellow Box. I thought this info in the RDF file were to be encrypted. If they are why are they displayed as OPEN TEXT in this manner? With this happening in this way could not a HACKER use that feature to get my settings to break passwords?
Have not updated to v1.6 yet, was reading this spread first to see what was going on. I will await your reply before doing the update.
Thank you for reading this,
P.S. Still having the problem from my other post about "Multiple Logins for the same site . ., Window for selecting login reappears . . ."
The link is below here:
http://forums.passwordmaker.org/index.php?...t&p=1278989 (http://forums.passwordmaker.org/index.php?s=&showtopic=1065&view=findpost&p=1278989)
Again thank you for reading my posts,
-
I thought this info in the RDF file were to be encripted. If they are why are they displayed as OPEN TEXT in this manner?
The large yellow box ("tooltip") doesn't display any passwords. It just displays settings. Anyone can obtain your settings if they have access to your PC by opening PasswordMaker and looking at the settings there. But that doesn't matter--the settings are useless unless they know your master password! There is no way to reverse-engineer your master password if they know your settings.
-
The large yellow box ("tooltip") doesn't display any passwords. It just displays settings. Anyone can obtain your settings if they have access to your PC by opening PasswordMaker and looking at the settings there. But that doesn't matter--the settings are useless unless they know your master password! There is no way to reverse-engineer your master password if they know your settings.
Is this an option that can be disabled? The reason I ask is, I don't see my settings, all I see when I hover my mouse over the icon is:
"There has been no activity on this page."
-
It happens after PasswordMaker fills in stuff, either automatically, or after the CoolKey has been hit.
-
It happens after PasswordMaker fills in stuff, either automatically, or after the CoolKey has been hit.
Ah, ok, thanks...
-
Its purpose is to inform you of which account was used for auto-populate/Coolkey. Without it, determining which account was used would become pretty tedious.
-
The large yellow box ("tooltip") doesn't display any passwords. It just displays settings. Anyone can obtain your settings if they have access to your PC by opening PasswordMaker and looking at the settings there. But that doesn't matter--the settings are useless unless they know your master password! There is no way to reverse-engineer your master password if they know your settings.
Eric,
That message was sent before I did the UpDate to v1.6, v1.5.1 was still my PWM. Now that I am on the 1.6 that display is NO longer there, I too get the message now, "There has been no activity on this page."
Sorry about this confussion,
-
Gentlemen,
I have to be re-trained, been gone too long on other projects. Have to be gone some more as soon as I get these postings cleaned up.
Thank you for reading them and replying,
-
"Sir Tanstaafl,"
I did correct the WildCard usage, actually removed the one on the Right End and finished the link as it is shown. Plus, when checking that for correctness it did not work, so I closed FF even in TASKMAN and restarted and now it is working correctly. I knew it would if I did everythingy correct and I did!!
Anythingy else I need to do, YA!, SHUT-UP,
Thanks all,
-
I did correct the WildCard usage, actually removed the one on the Right End and finished the link as it is shown. Plus, when checking that for correctness it did not work, so I closed FF even in TASKMAN and restarted and now it is working correctly. I knew it would if I did everythingy correct and I did!!
I'm guessing that you have more than one email account with this webmail provider, which is the only reason I can think of that the 'Choose Account' dialog would pop-up...
So, you are saying that the wildcards didn't work for you as expected, so you removed them?
They should work. They work on all of mine...
-
I'm guessing that you have more than one email account with this webmail provider, which is the only reason I can think of that the 'Choose Account' dialog would pop-up...
So, you are saying that the wildcards didn't work for you as expected, so you removed them?
They should work. They work on all of mine...
"Tanstaafl,"
In all locations that have the URL I removed one of the "t"s so it would not attempt to show it as a link.
Your guess is correct and the URL that was used was just the *htp://mail.mail.com* (example). The "/default.html" which would take me to my InBox, but would call up PWM every time any page was open on that site. So I had to remove the WildCard entry on the right side so it would stop calling up PWM every time it saw htp://mail.mail.com/YourMailBox.htm (example) and installed just the location for the LOGIN screen. I do not use the 'AutoPopulate' feature, just the GoldKey or right click and select the Populate This Field.
NO, that is not what I am saying, the right side is not removing both, I think that is just ONE (1) side. Plus, I am using all 'Custom' accounts, not any 'Defaults'.
You are probably using the 'Defaults' and that may work for you, if you use custom and have more than one login for that website then the 'Account Selection' window will POP up so you can make the appropriate selection, right? I think so.
HEY, if this sounds or reads a little sarcastic, it is NOT meant to be. That is just me, so I will apologize prior to sending so you can get mad at me for doing it this way and we can settle it later, OK?
Edited several times by LkonKbd to assist in making it more understandable. There may be some more before whenever. . .
-
Hey Tough Guy--it sounds like you talk to yourself!
-
Sir Eric,
You got it, that is the only intelligent conversation I can have. I also disagree with that other side all of the time. Have problems winning any arguement as well, but; we have to call in an arbitrator some times.
Where do you get this "Tough Guy" bit anyways?
Why are you still up, you need your rest so you can pound out more CODE to make more improvements, as if there were any needed.
Hey, have a good evening, am having to shut down so I can get my Beauty Rest, and believe me, I need it.
Good NITE, Eric,
-
The large yellow box ("tooltip") doesn't display any passwords. It just displays settings. Anyone can obtain your settings if they have access to your PC by opening PasswordMaker and looking at the settings there. But that doesn't matter--the settings are useless unless they know your master password! There is no way to reverse-engineer your master password if they know your settings.
OK Sir Eric,
Here is an 'What If' for ya', you are changing the MstrPsWrd and you place your password for each site, 'Custom Accounts,' in the fields 'Prefix' & 'Sufix'. They will be displayed in there as PLAIN TEXT, RIGHT?
Fodder for thought,
-
So I had to remove the WildCard entry on the right side so it would stop calling up PWM every time it saw htp://mail.mail.com/YourMailBox.htm (example) and installed just the location for the LOGIN screen.
Understood now - should have understood that one sooner though - guess I'm getting slow in my old age...
You are probably using the 'Defaults' and that may work for you,
I use Defaults for inconsequential sites (many web forums, etc) - I have the defaults set to only use alpha-numeric characters.
I use custom accounts for anything important, and I have 3 or 4 different Master Passwords that I use, depending on how important an account is - ie, really strong MPW for financial accounts, weaker MPW's for other types.
I have a system, and it works well for me...
if you use custom and have more than one login for that website then the 'Account Selection' window will POP up so you can make the appropriate selection, right? I think so.
Yep...
HEY, if this sounds or reads a little sarcastic, it is NOT meant to be. That is just me, so I will apologize prior to sending so you can get mad at me for doing it this way and we can settle it later, OK?
Heh, no worries, mate... I've got pretty thick skin when it comes to my online personality - although in some of the political forums I frequent, just for fun I take the gloves off and let the blows land where they may.
Charles
-
Quote Tanstaafl: Understood now - should have understood that one sooner though - guess I'm getting slow in my old age... EndQuote.
That feature of our brains will NOT improve any so get over it. We all have that problem.
Another Quote Tanstaafl: Heh, no worries, mate... I've got pretty thick skin when it comes to my online personality - although in some of the political forums I frequent, just for fun I take the gloves off and let the blows land where they may. End Quote.
I make all attempts to prevent FLAMES from flying. As for the Political scene, stay far, far, far, away from that. Two (2) items I do not get involved in, Religion and Politics. They make ENEMYS too fast and easy. "Opinions are like a--holes . . ." and mine will not fit that category. I am the "a__hole."
Thankyou for the reply and reading this one as well,