Posts tagged Password at The Unofficial Apple Weblog (TUAW)

Posts with tag password

1Password 2.6.5 released

Posted Jun 26th 2008 2:00PM by Cory Bohon
Filed under: Software

Agile Web Solutions has updated their 1Password product with support for 4 new browsers and better support for the newly released Firefox 3. 1Password now works on the following web-browsing applications: Safari 4 (Developer Preview), DEVONagent 2.3.1, latest OmniWeb, and Flock 2 beta.

In addition to updated browser support, 1Password also boasts a higher level of stability while running in Camino on PPC Macs. You can see the full list of updates (all 21 of them) by visiting the Agile Web Solutions' website. In addition, you can download the update by going to 1Password > Check for Updates in the 1Password application.

Mac OS X password recoverable from RAM?

Posted Mar 3rd 2008 11:00PM by Cory Bohon
Filed under: OS, Bad Apple

In a recent post over at Ars Technica, they say that Mac OS X users could have their login passwords recovered through physically accessing the RAM. This comes after FileVault was proven to be cracked. The article notes that Mac OS X and certain applications store the user's password in memory, leaving it there after you've logged in. While locally-running apps cannot readily retrieve the password, someone could get access to the contents of RAM after the computer has been rebooted or shut down.

This could be accomplished by physical means and might require the hacker to remove the RAM cover on your Mac and chill the RAM, as suggested by Edward Felten's research team at Princeton. This freezing allows the information to stay on the RAM for longer than the normal 2.5 to 35 seconds -- allowing someone to place it in another computer and read the contents.

In a separate approach to the password-in-RAM vulnerability, CNET witnessed an EFF demo of an attack using a custom NetBoot "EFI memory scraper" to record the RAM contents on reboot and save the data as a file on another machine over the network -- the attackers were able to clearly find the login password in the file. Again, this attack requires physical access to the machine (in order to force the NetBoot via holding down the N key on restart) within a minute or two of shutdown. However, an attacker could conceivably target a machine that was locked or sleeping (with RAM contents 'live'), power it off and back on, and use the NetBoot attack immediately.

While Apple has been made aware of the attack (notified on February 5), no fixes for these issues were reported in the 2/11 security update. According to CNET, an Apple spokesperson said they were aware of the issues and were "working to fix it in an upcoming software update." Until this update comes out, you may want to set a firmware password for your Mac, or wait longer to leave your unattended Mac after a shut down. Alternatively, we have lovely TUAW-branded tin foil hats available for purchase.

[via Ars Technica]

1Password brings form-filling to the iPhone

Posted Jan 30th 2008 7:00PM by Nik Fletcher

Back at Macworld we saw a sneak-peek from 1Password creater Dave Teare of the (then forthcoming) iPhone form-filling, username-storing 1Password bookmarklet for iPhone (pictured above at Moscone). Today sees a new build of 1Password pushed out for beta-loving users who want to take advantage of it.

Of course, one main qualm people may have with this is "just how secure is my data?" The 1Password data is saved in the bookmarklet itself using "448-bit blowfish encryption". Users set up password to use with the bookmarklet, and 1Password outputs all your data in an encrypted format to sync via iTunes' 'Sync Safari Bookmarks option'. Once on the iPhone, you navigate to the page such as Pownce, choose the bookmarklet, enter your previously-set password and choose the login you wish to use. All the form filling, and form submission, is handled by the Javascript.

I've been long-in-need of something like this for the iPhone -- the typical 'too many usernames, too many unique passwords' scenario -- and using it this evening, it's been mighty handy. If you're wanting to get your hands on it, simply set your copy of 1Password to check for beta releases (all the usual beta disclaimers apply) and download the most recent release!

1Passwd 2.5b adds iPhone export

Posted Oct 8th 2007 3:00PM by Mat Lu
Filed under: Software, Beta Beat, iPhone

The browser password manager 1Passwd has just been updated to version 2.5b and adds an interesting new feature: iPhone export. You're now able to export your secure passwords and notes to the iPhone from your Mac. The clever thing is that they accomplish this without hacking the iPhone in any way.

Basically what it does is create a special Safari secured bookmarket from your 1Passwrd data "using 448 bit Blowfish encryption." This special bookmarklet is then synced to the iPhone in the normal way through iTunes. When you access the bookmarklet in mobile Safari on the iPhone it prompts you for your password and then gives you access to your passwords, secure notes, etc. Since it's just a bookmarklet in mobile Safari this should not be affected by any future firmware changes, etc.

The latest 1passwd beta can be downloaded from the Agile Web Solutions Forum.

Secure your Mac: Eikon biometric security

Posted Sep 25th 2007 5:00PM by Mat Lu
Filed under: Peripherals, Security

TUAW has lately been trying to help you Secure Your Mac, and while a few options have been available, biometric security is one area in which the Mac has seemed to lag behind the Windows side. Now UPEK has released a preview of the Mac version of their Eikon Digital Privacy Manager. The software allows you to use the Eikon scanner to login to your account, control your Keychain, switch users, or lock down your Mac.

The Eikon scanner is a USB device which costs about $40 and only comes with Windows software. Once you have the scanner however, you can download the Mac Protector Suite Preview for free from UPEK. If security is a serious concern and passwords are getting tedious then a biometric solution like this one looks increasingly cost effective.

[via OhGizmo]

TUAW Podcast #22: 1Passwd

Posted Mar 15th 2007 2:00PM by David Chartier
Filed under: Software, Internet Tools, Podcasts

This week's podcast covers 1Passwd, the password manager and autofill tool that brings some really unique features and multi-browser support for the Keychain to the table. For just under 8 minutes I demonstrate some of the killer features of this app that go above and beyond the norm, and the whole thing weighs in at a mere 28MB. Snag it from our iTunes Store Podcast directory, this direct link or our own podcast rss feed. Enjoy!

1Passwd 2.3 brings new UI, folders, 1Click Login Bookmarks and more to browser keychain tool

Posted Feb 4th 2007 10:00AM by David Chartier
Filed under: Software, Internet Tools, Security

1Passwd from Agile Web Solutions is one of those browser addons that just makes me feel all warm and fuzzy, as if its developers had an epiphany while laying in a field of not-too-prickly grass on a perfectly warm, sunny day, asking themselves: "how can we make the world a better place?"

Which browser does 1Passwd work with, you ask? Why, just about all of them. This password and identity manager integrates with nearly every major Mac OS X browser, including Safari, Firefox, Camino and OmniWeb, as well as DEVONagent and even NetNewsWire, to bring Keychain nirvana and multiple identity autofill to website forms (that's right: Firefox can use the Keychain, thanks to 1Passwd). In other words: it's an über-Keychain for your browsers, allowing you to stop caring about which one you're using, where you saved that forum's password or how you're going to fill out the umpteenth store registration. And as you might have guessed from my introduction: I kind of like 1Passwd, and a recent upgrade to v2.3 offers even more to rave about.

Most noticeably, the new version ushers in a fresh new UI, shedding the old 'n busted brushed metal for the unified look that's all the craze with 3rd party developers and lovers of good-looking software. Don't be fooled though; the new features are far more than skin deep. Folders and smart folders are now in full effect, allowing for more flexible organization of your unruly collection of logins. Another really slick new feature is 1Click Login Bookmarks, which allow you to save a bookmark with specific login credentials - perfect for sites at which you have multiple credentials. Goodbye, tedious logging in/out all day!

Plenty of other new and updated features are detailed in this blog post, and many of 1Passwd's major features, such as Firefox integration and Palm/Treo syncing, have screenshots or video demonstrations on its product page (scroll down for all the goods). A demo is available, while a single license costs a mere $30, with a 3-license family pack for $40.

How do I reset my Keychain password?

Posted Jul 20th 2006 10:00AM by Scott McNulty
Filed under: OS

Yesterday I was singing the praises of Keychain, and I still stand by my assessment. Keychain is a key feature of OS X that makes it stand apart from Windows. But what happens if you forget your Keychain password? You know, the password that lets you access all your other, heavily encrypted data?

That is exactly what happened to one poor soul who put the question to the MetaFilter community. It isn't as bad as forgetting your FileVault password, however, the sad truth of the matter is that you're going to have to generate yourself a new Keychain folder and starting from scratch. I know it sucks, but that is the price we pay for security. If you are in the same situation check out the MetaFilter discussion for the steps you need to take.

1Passwd - password/form manager lets Firefox use the Keychain

Posted Jun 6th 2006 8:35PM by David Chartier
Filed under: Software, Internet Tools

*Oh snap!* Agile Web Solutions has created a password and form manager extension for both Safari and Firefox that fixes one of my biggest gripes about Mozilla's flagship browser: it can store website passwords in Mac OS X's Keychain Access application. For those who haven't stumbled upon the wonders of the Keychain: it's a system-wide secure password manager that most other Mac OS X apps can use to store logins for things like websites and FTP access. 1Passwd is an extension that, amongst other features, lets Firefox join the Keychain party party so you can have one secure, centralized area for managing (and backing up) your logins. This also means that if you have a .Mac account, any passwords you enter into Firefox will sync between your Macs. But 1Passwd doesn't stop at handle just your login information. Check out the full feature list to see everything else it can do for both Safari and Firefox.

If beer could be sent virtually through PayPal, I'd send Agile Web Solutions a twelve pack; this brings Firefox one step closer to being a true Mac OS X browser. 1Passwd is currently in a third beta release, and those who opt to test the beta and offer their email addresses will receive a discount off its (somewhat steep) $29.95 price.

Automator action for encrypting/decrypting files

Posted Mar 23rd 2006 2:00PM by David Chartier
Filed under: Software, Cool tools, Productivity

Interested in beefing up security on some of your files or folders, but wary of the consequences if FileVault takes on a mind of its own? This Encrypt and Decrypt Files Automator action might be right up your alley, as it allows you to perform these actions with an algorithm and password. Perfect for fitting into the workflows of even the most security-conscious Mac OS X Tiger users.

The action is free and can be had over at Automator World.

#	Blogger	Posts	Cmts
1	Cory Bohon	87	1
2	Robert Palmer	59	43
3	Steven Sande	56	23
4	Mat Lu	36	10
5	Scott McNulty	36	0
6	Dave Caolo	34	0
7	Erica Sadun	28	2
8	Brett Terpstra	21	0
9	Mike Schramm	18	2
10	Michael Rose	13	34
11	Christina Warren	9	38
12	Joshua Ellis	4	4
13	Lisa Hoover	2	6
14	Chris Ullrich	1	2
15	Jason Clarke	1	1

Rumor: Rock Band 2 setlist reportedly discovered by two sources Harry Potter and the Half-Blood Prince and the debut trailer PS Fanboy Week in Review: 6/30 - 7/6	Opera partners with Ask.com Facebook for Palm released, gives Centro users something to show off Truecrypt Updates to v6, Hides Your Subversive Plots Even Better!
Flickr Find: Macintosh on Nintendo DS Ask TUAW: rEFIt with Open Firmware passwords, iCal problems, iPod without iTunes, and more Beefing up your Phishing net	Sony's Hancock wins holiday race Sunday Funnies: Business should have NBA type salary cap Las Vegas takes its lumps over the holiday weekend
Shotest Shogi passes cert; Basment Pool delayed Free Bungie Day '08 downloads are now available! A few new Prince of Persia shots slip out	Bugatti to release Veyron successor by 2012, considers racing program Spy Shots: 2010 Buick LaCrosse spotted in the wild Chrysler and Great Wall to share technology, distribution
Bootfighter Windom XP SP-2, the mecha OS game Shift 3, then find your way home The MMO week in a minute	All-Star Grievances: National League West Rafael Nadal Shocks Roger Federer in Thrilling Wimbledon Final All-Star Grievances: The NL Central

1Password 2.6.5 released

Mac OS X password recoverable from RAM?

1Password brings form-filling to the iPhone

1Passwd 2.5b adds iPhone export

Secure your Mac: Eikon biometric security

TUAW Podcast #22: 1Passwd

1Passwd 2.3 brings new UI, folders, 1Click Login Bookmarks and more to browser keychain tool

How do I reset my Keychain password?

1Passwd - password/form manager lets Firefox use the Keychain

Automator action for encrypting/decrypting files

TUAW Features

RESOURCES

RSS NEWSFEEDS

Sponsored Links

The Unofficial Apple Weblog (TUAW) bloggers (30 days)

Featured Galleries

Twitter Updates

Most Commented On (7 days)

Recent Comments

More Apple Analysis

More from AOL Money and Finance

Weblogs, Inc. Network