Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Passwords in the cloud? I use simple local scri (Score 2) 206

There is a bit missing in the post above:

$ cat `which t`
#!/bin/sh

file=$HOME/timecode
tcvol=/media/truecrypt1

do=$1

case "$do" in
        "on")
        if grep -q /media/truecrypt1 < /proc/mounts ; then
                  logger -t truecrypt "$0 Starting tc: already mounted"
                exit
        fi
        logger -t truecrypt "$0 Starting tc"
        DISPLAY=:0.0 truecrypt $file ;;
        "off")
        t=$(find $tcvol -type f -printf "%TY-%Tm-%Td %TH:%TM\n" | sort -n | tail -1)
        truecrypt -d
        if [ -n "$t" ] ; then
                touch -d "$t" $file
                logger -t truecrypt "$0 Stopped tc and set mtime to $t"
        else
                logger -t truecrypt "$0 Stopped tc; no mtime to set found"
        fi ;;
        "status")
        truecrypt -t -l ;;
        "*")
        echo "Usage: $0 on|off|status";
        logger -t truecrypt "Bad option '$do' given to $0"
        exit 1; ;;
esac

Comment Passwords in the cloud? I use simple local scripts (Score 2) 206

It's a strange idea to store passwords in the cloud anyway. I use these simple scripts in Ubuntu. Could work on Mac too, and I had a Windows/Perl/batch-file version long ago:

$ cat `which p`
#!/bin/bash

[ -d /media/truecrypt1 ] || t on

# accept up to 3 arguments, and filter on all 3
if [ -z "$2" ]; then
        grep -ni "$1" /media/truecrypt1/p
else
        grep -ni "$1" /media/truecrypt1/p | grep -i "$2" | grep -i "$3"
fi

$ cat `which padd`
#!/bin/bash
[ -d /media/truecrypt1 ] || t on
echo `date +%F` " $@" >>/media/truecrypt1/p

And to mount the truecrypt volume:

$ cat `which t`
#!/bin/sh

file=$HOME/timecode
tcvol=/media/truecrypt1

do=$1

case "$do" in
        "on")
        if grep -q /media/truecrypt1

Comment Only a USA problem? (Score 5, Informative) 90

Isn't this problem limited to the USA because their banks use only user/password for authentication?

I know the procedures for 5 or 6 banks in 3 different European countries, and all of them require a lot more to authenticate me.

The 3 procedures are:

* Bank 1 (the simplest, and first system I have seen, some 10 years ago).
- authenticate with user id (unrelated to name or account number) and password
- be prompted to enter a one-time number from a list which I received by postal (registered) mail (it asks for the number at row x, column y)

All other banks have long moved to something like the 2 others:

* Bank 2.
- put a special card received from the bank into a special calculator also received from the bank and enter password
- enter user id (unrelated to name or account number) on bank web site
- receive a one-time 6 digit number and type it into the special calculator
- the calculator gives an 8 or 10 alphanumeric one-time password to enter into the web form

* Bank 3.
- I can't remember the details, but as with bank 2, there is a special device and procedure to follow involving password, user id, device id and one-time numbers exchanged between the device and the bank's site.

- On top of that, the bank sends me an email every time I connect, with the date, time, the IP address from which I connected, and the money operations performed if any.

Slashdot Top Deals

If all else fails, immortality can always be assured by spectacular error. -- John Kenneth Galbraith

Working...