News for hackers. Stuff that matters.
Re:Pass: A standard Unix password manager by tombert on Friday July 21, 2017 @09:48AM (#14820488)
I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows.

I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people.

That said, I think Pass is awesome, and having my passwords stored in Github makes me really happy.

Re:Pass: A standard Unix password manager by aeorgnoieang on Friday July 21, 2017 @10:18AM (#14820707)
It's somewhat easier with Bash on Ubuntu on Windows, tho kinda broken (because the copy to clipboard feature doesn't work out of the box unless you're running an X server).

But yeah, I kinda don't like using Gpg4Win with Cygwin, which is what I'm guessing you've used too.

With the "Creators Update" there's now a `clip.exe` to which one can pipe so maybe it's not too hard to update Pass, which is itself just a Bash script.

Re:Pass: A standard Unix password manager by zx2c4 on Friday July 21, 2017 @06:11PM (#14824085)
That's good to know. I'll add support for clip.exe with the next pass version. Send an email to the mailing list to remind me?
Re:Pass: A standard Unix password manager by y4mi on Friday July 21, 2017 @10:14AM (#14820675)
the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck

i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

Re:Pass: A standard Unix password manager by cookiecaper on Friday July 21, 2017 @11:50AM (#14821455)
Please understand that browser integration is the Achilles' Heel of password managers. While you get the convenience of autofill, you're also bringing access to your password database into the browser's attack surface. Bugs in the browser sandbox or improper extension implementations can allow rogue sites to get the goods. There have been multiple instances of major password manager extensions leaking secrets just in the last year.

Copying and pasting may be annoying, but it's much safer, especially if you use a program that will autoclear your clipboard for you (KeePass 2 does this after 12 seconds by default).

Re:Pass: A standard Unix password manager by andrew3726 on Friday July 21, 2017 @12:49PM (#14821947)
I agree that browser integration is troublesome. To circumvent having to use a browser extension I use rofi-pass[0] which is a external script (using rofi/dmenu and pass), so no browser integration. But it features autofill which is extremely convenient.

[0] https://github.com/carnager/rofi-pass

Re:Pass: A standard Unix password manager by likeclockwork on Saturday July 22, 2017 @10:05PM (#14830542)
Also using rofi-pass, really it's better than browser integration. Especially if you bind it to a hotkey.
Re:Pass: A standard Unix password manager by Spivak on Friday July 21, 2017 @10:18AM (#14820708)
Re:Pass: A standard Unix password manager by y4mi on Friday July 21, 2017 @01:46PM (#14822412)
yes, as i said before. there is some support for linux systems. i'm using both linux and windows as well as android. my password manager will need to support and autofill on all environments with at least firefox and chrome.

pass got linux covered (both chrome and firefox), but doesn't really work for winndows.

android is really tiresome as well, as there is no way to skip my long masterpassword in favour of a fingerprint. I know, its not easy to implement that feature securely.

Re:Pass: A standard Unix password manager by aeorgnoieang on Friday July 21, 2017 @10:19AM (#14820717)
If you want passwords automatically inserted why not just use the browser's features that do that? I do that for some sites.
Re:Pass: A standard Unix password manager by devopsproject on Friday July 21, 2017 @11:51AM (#14821469)
it is not as secure
Re:Pass: A standard Unix password manager by wyager on Friday July 21, 2017 @11:45AM (#14821413)
Looks like the iOS app supports browser autofill and there's a Firefox plugin.
Re:Pass: A standard Unix password manager by majkinetor on Friday July 21, 2017 @11:09AM (#14821116)
Exactly my problem.

Today I found this, need to check it out: https://github.com/Baggykiin/pass-winmenu