storing passwords and like sensitive info in linux?
Hello!
i do a bit of investigation about subj, and come to vim with blowfish2 encryption. http://blog.learningtree.com/encrypting-with-vim/ can anyone point out some flaws in that usage? for me it looks perfect -vim is almost anywhere, decrypted verion not show in filesystem, built-in cipher and so on... btw, what is nowadays with default encoding in vim? it is utf8 or what? any another advices? |
Quote:
TIP: type UTF-8 in the search field of this page: http://vimdoc.sourceforge.net/ |
ok, thanks:
If your current locale is in an utf-8 encoding, Vim will automatically start in utf-8 mode. If you are using another locale: set encoding=utf-8 |
Quote:
I use vim in xterm to keep secret stuff, but with the standard gpg encryption. This is the relevant part of .vimrc: Code:
set backupskip+=secrets.gpg Code:
XTerm*VT100.translations: #override \n\ |
Quote:
thanks for sharing valuable information! if not secret, why you choose .gpg over vim build-in encryption? |
Quote:
|
I use this:
http://slackbuilds.org/repository/14...assword-store/ But any number of password managers would do just as well. |
Isn't telling the whole internet how you store your passwords & sensitive info a mistake?
|
1 Attachment(s)
Quote:
|
Quote:
and vice versa - if you have good password and goot algorytm, then i do not see any problems - all world compute power for tens of years not enought to brute-force it. but if you are important enought, there is a mans in black, and with soldering iron, who can come to you, and in old, fashioned methods, you tell im all your keys, passwords, and all what he want to know in minutes... :P |
I'm lucky. I'm too poor and insignifant for criminals & 3-letter agencies to take an interest in. So I write my passwords on bits of paper, stowed in places where only I could find them. ;)
|
Quote:
but as systems and passwords and so going to more and more,and my memory get worse it was very useful to have a just file with most important info, who i can have on various systems, and maybe even on my phone -encrypted, and readable only by me, but in any time, and any place. this tale is all about that... :P |
The relative security of anything like an encrypted password file is also related to basic network security. Firewalls can not only have honey pots but fangs as well, or at the very least where intrusion attempts rarely go unnoticed.
Anecdote - I was once on a Linux IRC channel and casually pinged a member who immediately asked me why I pinged him. It turned out he had such attempts STDOUT'ed to an old and LOUD dot matrix printer alerting him with nearly an immediate, and lasting alarm/record. I later learned he was 14 years old. I was impressed and did definitely take note. |
|
Quote:
|
All times are GMT -5. The time now is 04:05 PM. |