Diff passwords

[Eric H. Jung]

How did you get my same password "c1ca8854" generated on your v0.6 instance without knowing the master password??

I left the master password empty.

I thought given the password, and the website it is impossible to reverseengineer the masterpassword

That's right. It would take many lifetimes to reverse engineer the master password -- assuming you're using one!

Is there a security hole somewhere? Hope not since this is a great piece of software.

Thank you. No, there's no security hole. You really must use a master password or you'll be susceptible to the very attack that happened here -- I happened to leave the master password field blank/empty, and got the same results as you because all the other settings were the same.

If you select a master password instead of using an empty one, it will take many lifetimes for anyone to reverse engineer your master.

Hope this answers your question -- let me know if you have any others,
Eric

[Guest]

Thanks for the quick reply. Wow I feel better now!

Sound like we need some warnings to indicate a blank or insufficient length master password. Afterall the strength of the generated passwd depends on the strength of the masterpassword.

A blank password without warnings is easy to miss, since PM generates a password anyways and one (after several uses) does not pay attention and use the shortcut keys to copy pwds.

Please consider adding a warning in the next patch. Thanks much!

[RogueMD]

I really have been out of town and really haven't used it, so sry for such a late response.

Well this is what i'm getting. With 0.6 and 0.7.2 i get the same pw minus the master pw, all things being set the same. When i put in the master pw the first digit of the pw gets moved to the back of the new password with 0.7.2.

ie  0.6  = 0abccab125

    0.7.2= abccab1250

I have been able to duplicate at my work pc and on the online version.

[Eric H. Jung]

Please consider adding a warning in the next patch.

OK, I will do that.

RogueMD, what characters have you specified in the Characters field for PasswordMaker 0.7.2?

[Guest]

In the new update it is fixed, but i put in 0123456789abcdef.

really is odd, there is no reason that if i get the same pw in both versions that just adding the master pw should change the overall pw

[Eric H. Jung]

So everything's working for you now?

[Guest]

No sir, still is not working for me.

[Rogue]

sry last two post were me. just didn't put my name in

[Eric H. Jung]

I don't understand. You wrote:

In the new update it is fixed, but i put in 0123456789abcdef.

So what's the problem you've having?

[Rogue]

In 0.7.2 the charactors that are auto placed are correct. In the other versions they had the extra 0 between the 9 and the A.

[Eric H. Jung]

OK, so is there anything else I can help you with? It seems everything's working for you now...

[Rogue]

Yes i'm still having this problem.

Well this is what i'm getting. With 0.6 and 0.7.2 i get the same pw minus the master pw, all things being set the same. When i put in the master pw the first digit of the pw gets moved to the back of the new password with 0.7.2.

ie 0.6 = 0abccab125

0.7.2= abccab1250

I have been able to duplicate at my work pc and on the online version.

[Eric H. Jung]

OK, now I understand. This bug is being discussed here, too.

Please read that thread and post your suggestion about what to do over there...

Thank you,
Eric

[Rogue]

Sry for all of the confustion that i put you threw. Thanks for the link. I will check back on the forums to see the final outcome of this issue. I will just go and change all my pw's to the 0.7.2 version. Sounds like that is just going to be the easiest way to fix the problem.

Might want to make a locked post explaining this problem, so you don't have to go threw this again. I know you have spent alot of time on just this thread, again sry for that and keep up the solid work.