topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Friday December 6, 2024, 2:30 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: 2011 status report  (Read 23495 times)

f0dder

  • Moderator
  • Joined in 2005
  • *****
  • Posts: 9,153
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
2011 status report
« on: March 04, 2011, 01:44 PM »
OK, so I haven't done a helluva lot of work on fSekrit since the progress and thoughts threads was started. No lame excuses, just a lot of Real LifeTM :)

I've decided on Git for version control, as I've verified it can do the history split/merge I want for the "historic & private" version vs. the "new & public" one. Not entirely sure how to wrangle the grafting yet, but I know it can be done, and that's the important thing. I'm not entirely sure when to move things over to Git - or, rather, where to start the public history, as I've already moved the private repository to Git. I could do the remaining cleanup so there's no swear-words or other embarrassing stuff in the codebase and go public there, or I could do the minimum amount of work so there's a working & tested build (which is some effort) until the code base is released. Not entirely sure yet.

So, what's the status right now?

I've pretty much settled on the internal data representation I want for the next version of fSekrit, which will allow for things like multiple tabs in one document and future option expandability without requiring file-format changes. I've updated reader code for v1 and v2 of the fSekrit file format to read into this new internal representation, but I still need to settle on a serialized format of the internal v3 representation, and write load/save code for this. Not terribly complicated, but fairly boring - C# is so much easier than C++, just add [DataContract] and [DataMember] attributes and you're pretty much done :P. I'm considering whether I should just use Google's protobuf, but on the other hand one of the main selling points of fSekrit is compact size.

And then there's the other stuff from the Progress thread that haven't really been started yet. What I'm currently considering is to finalize "sekritCore", which means verifying that I've made correct flexibility decisions with regards to the v3 document format, finalizing v3 load/save code, and possibly get some unit testing in place for these core features (as far as I can tell, Googles' testing framework is the best bet for C++ code). Once that's done, opensource the project, and start picking away at the ToDo list, one feature at a time.

Any comments, or have people stopped using fSekrit for lack of updates? ;)
- carpe noctem

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,649
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #1 on: March 04, 2011, 02:05 PM »
I'm considering whether I should just use Google's protobuf, but on the other hand one of the main selling points of fSekrit is compact size.
Stay with C++ - Small and fast is (worth it) good! - Misery loves company...

cranioscopical

  • Friend of the Site
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,776
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #2 on: March 04, 2011, 02:07 PM »
I'm unqualified to comment on the technical aspects but am delighted to see fSekrit about to move forward.

Thanks for the time and effort that you put into it!

40hz

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 11,859
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #3 on: March 04, 2011, 03:00 PM »
One question: Why open source it? If you're going to be the sole coder and maintainer why bother to go that route with all the aggravation the 'open thing' so often brings with it?
 :)

f0dder

  • Moderator
  • Joined in 2005
  • *****
  • Posts: 9,153
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: 2011 status report
« Reply #4 on: March 04, 2011, 03:07 PM »
I'm considering whether I should just use Google's protobuf, but on the other hand one of the main selling points of fSekrit is compact size.
Stay with C++ - Small and fast is (worth it) good! - Misery loves company...
Oh, it's going to stay C++; there's protobuf, protobuf, everywhere :)

One question: Why open source it? If you're going to be the sole coder and maintainer why bother to go that route with all the aggravation the 'open thing' so often brings with it?
 :)
It's a vote of confidence kind of thing. No backdoors, hopefully no nasty bugs, ability to read the documents even when the world has moved from Windows to lunix and can no longer execute the .exe files, the possibility to accept patches from 3rd party developers (especially important since there's some features that plainly don't interest me).

And to ensure the program's life. I'm not going to stick around forever; hopefully for a while yet, but who knows if I might get de-persisted by a drunk bus driver tomorrow? :)
- carpe noctem
« Last Edit: March 04, 2011, 03:10 PM by f0dder »

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Points: 1
  • Posts: 9,776
    • View Profile
    • Read more about this member.
    • Donate to Member
Re: 2011 status report
« Reply #5 on: March 10, 2011, 08:00 PM »
but who knows if I might get de-persisted by a drunk bus driver tomorrow? :)

In that case please release the source today. ;)

AbteriX

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 1,149
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #6 on: March 11, 2011, 02:58 PM »
Any comments, or have people stopped using fSekrit for lack of updates? ;)
I like fSekrit as it is right now  :Thmbsup:
I use it mostly to keep serial numbers for an app in the same [public] folder (or CD) as the setup for this app.
Just double click fSekrit.exe, enter the password, read the serial, close the dialog. Pretty fine.

kilves76

  • Participant
  • Joined in 2011
  • *
  • default avatar
  • Posts: 2
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #7 on: July 04, 2011, 03:37 AM »
Tabs is a great idea to store different profiles/contexts in one file  :-*
  With advent of computing power, maybe consider 1024 bit encryption... maybe combined with "random" encryption variations from user's password or even user selectable (a combination of rol, ror, xor etc mangling stuff, for example pw_letter/mod_3 = use rol/ror/xor).
  Please note that i am not a crypto expert so don't actually know if this would be a security risk instead of an improvement!  :D  But it's an idea that's been in my head for ages, thank you for letting me steam it out.

f0dder

  • Moderator
  • Joined in 2005
  • *****
  • Posts: 9,153
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: 2011 status report
« Reply #8 on: July 17, 2011, 07:40 PM »
With advent of computing power, maybe consider 1024 bit encryption...
Key sizes larger than 256 bits currently tends to mean public/private key based encryption (Like, RSA) rather than symmetric-cipher encryption (like, AES). That's a simplification, but the general idea is that larger bitsize doesn't necessarily mean more secure, especially not if comparing ciphers types that are very different.

maybe combined with "random" encryption variations from user's password or even user selectable (a combination of rol, ror, xor etc mangling stuff, for example pw_letter/mod_3 = use rol/ror/xor).
That sounds fancy, but wouldn't add much real security - I believe in the mathematicians and cryptographers more than the marketing people - and I sincerely belive that if somebody had the capacity to break AES, adding a few ROR and ROLs would only make them LOL :)

Please note that i am not a crypto expert so don't actually know if this would be a security risk instead of an improvement!  :D  But it's an idea that's been in my head for ages, thank you for letting me steam it out.
Thanks for the ideas - I'm by no means an expert myself... so I let the experts do the hard mathy stuff, and follow their advise :)
- carpe noctem

kilves76

  • Participant
  • Joined in 2011
  • *
  • default avatar
  • Posts: 2
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #9 on: November 29, 2011, 01:12 AM »
This just came to me: the ability to create highly random passwords. Choose charset (how large: a-z, with numbers, punctuation, capitalization etc), choose length (even random length between user set min and max), and have it generated. Easy to save to Fsekrit, easy to copypaste to any new website, and let your browser remember it.

jgpaiva

  • Global Moderator
  • Joined in 2006
  • *****
  • Posts: 4,727
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #10 on: November 29, 2011, 04:19 AM »
kilves76: I'm not sure if fsekrit's intentions are to replace a password manager (but f0dder will surely clarify).
Still, what you mentioned is very similar to the way keepass works.
« Last Edit: November 29, 2011, 04:52 AM by jgpaiva, Reason: wording »

f0dder

  • Moderator
  • Joined in 2005
  • *****
  • Posts: 9,153
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: 2011 status report
« Reply #11 on: November 29, 2011, 10:04 AM »
I primarily use fSekrit for keeping hold of my various passphrases, but I'm not sure generating passphrases is something I want in core fSekrit - I want to keep it lean_and_mean. And there's definitely enough other tasks I'll have to implement first, anyway.

Hope I can get some vacation time around xmas or January - work has been eating up pretty much all my time & energy.
- carpe noctem

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 11,190
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #12 on: November 29, 2011, 10:47 AM »
work has been eating up pretty much all my time & energy.
* wraith808 raises a glass in commiseration.  :beerchug:

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,649
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #13 on: November 29, 2011, 11:26 AM »
work has been eating up pretty much all my time & energy.
* wraith808 raises a glass in commiseration.  :beerchug:

I'll drink to that! ...Christ, I burned out back in July...and I'm still dragging my carcase through the motions.

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 11,190
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #14 on: November 29, 2011, 01:43 PM »
Our beta date is next week...

vodkamakeseverthingbetter.jpg

...vodka *does* make everything better.

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,649
    • View Profile
    • Donate to Member
Re: 2011 status report
« Reply #15 on: November 29, 2011, 02:09 PM »
[/url])[/i]
...vodka *does* make everything better.

 :Thmbsup:  :D