Tao Effect Forums

Espionage => Espionage 3 => Topic started by: wesley on January 06, 2013, 11:06:35 PM

Title: Saving pw in keychain?
Post by: wesley on January 06, 2013, 11:06:35 PM
I want my folders to be unlocked automatically when I log in, without having to enter any password (other than the mac os x login password of course). Is this possible, if so how?
Title: Re: Saving pw in keychain?
Post by: zsolt on January 07, 2013, 06:23:46 AM
No it is not possible, you can however set the password of Espionage to 1 character, space for example, so you just hit space and enter.
The disk images are still protected with strong passwords generated by Espionage.

Rgds
Zsolt
Title: Re: Saving pw in keychain?
Post by: wesley on January 07, 2013, 06:52:23 AM
Thanks for your fast reply, but that seems a little insecure as well. The DMG's may have a highly encrypted password, but what if the "bad guys" just try to brute force the file where Espionage saves it's passwords in? So I don't think this is a good solution.

I know that keychain "only" does 3DES, but with a very long password, that doesn't really matter all that much. So it would be a welcome feature to add to this, so all protected folders can auto-mount on login.
Title: Re: Saving pw in keychain?
Post by: zsolt on January 07, 2013, 10:32:15 AM
OK, so you want an option where Espionage would autolaunch at login, would autounlock some folders, but because this option selected it would not ask you for espionage password at all.

I will submit it to the project manager, maybe you see it in the upcoming versions.

Thanks for your input,

Zsolt
Title: Re: Saving pw in keychain?
Post by: wesley on January 07, 2013, 10:57:12 AM
That's right, it's basically to protect the data from thieves. They'd have to know my keychain password to gain access to the encrypted drives. Yes, keychain is 3DES, but that doesn't really matter if you have a strong password. Besides, it's an option for the user to enable this or not. I don't care about regular family use though it is protected anyway by a screensaver password after a few minute of inactivity.
Title: Re: Saving pw in keychain?
Post by: wesley on January 08, 2013, 06:54:48 AM
I just found another method, can you tell me if this is OK?

If i go to /Users/me/Library/Application Support/com.taoeffect.Espionage3/Data

double click the volume there, type the password and set it to "remember", and then add that volume file to the login items via system preferences > accounts, it should auto-open. Is this an OK behavior?
Title: Re: Saving pw in keychain?
Post by: wesley on January 08, 2013, 07:01:03 AM
Actually it doesn't work, the alias and location isn't properly set.. :(
Title: Re: Saving pw in keychain?
Post by: zsolt on January 08, 2013, 02:27:47 PM
Hello, I'm glad you do not give up, but all what we can do is hacking, officially it is not possible and if you make it work, I cannot guarantee that it will stay working with the next application update, so all you do is on your own "risk".

I already filed the feature request as promised.

Rgds
Zsolt
Title: Re: Saving pw in keychain?
Post by: ceshiwuhao on March 05, 2013, 03:04:59 AM
They'd have to know my keychain password to gain access to the encrypted drives. Yes, keychain is 3DES, but that doesn't really matter if you have a strong password. Besides, it's an option for the user to enable this or not.