Author Topic: LATEST VERSION: fSekrit 1.40 shrinkwrapped! (Read 132,838 times)

f0dder · « **on:** December 03, 2009, 09:30 PM »

There, fSekrit 1.40 has been released!

Since stuff mentioned in the beta period should have been mostly addressed, I've decided that 1.40 is ready as an early 2009 christmas present. So, what do we have here?

Version 1.40 - December 3, 2009 - 90kb/45.5kb

fixed: file->export appends ".txt" instead of ".exe" if no extension given.
fixed: long-standing bug where failing to save changes when closing fSekrit with a modified document would cause fSekrit to exit, rather than notifying of error and let user attempt to save again.
fixed: saves are *finally* done properly, by saving to a temporary file and replacing the current file only when all the file writing business is done.
added: font selection dialog, no longer do you need to much around with the registry to set another default font. The font is still not stored in your document, though, and is single global per-user registry setting.
added: "portable" mode, which (for now) means it will not use %TEMP% to store it's temporary editor executable, but instead store it in the same folder as the opened document. Registry is still used for font selection, though! To enable this feature, create a file called "fSekrit.portable" in the same folder as the document you want to function in portable mode.
added: URLs are now recognized and turned into hyperlinks.
fixed: Read-only notes should be a lot more sane - changed from confusing "make read-only" that half-worked to "Save As Read-only" that works
fixed: Win9x and NT4 support has been broken since version 1.35. Release builds are now done with an older compiler toolchain, and 9x/NT4 support is back

Enjoy!

cranioscopical · « **Reply #1 on:** December 04, 2009, 12:17 AM »

Thanks very much!

nosh · « **Reply #2 on:** December 04, 2009, 06:40 AM »

I've never had the need to actually use fSekrit but it's such a cool utility that I keep upgrading!

Thanks, f.

SKA · « **Reply #3 on:** December 04, 2009, 01:35 PM »

Thanks f0dder for this great Christmas present !

May you be prosperous and happy and make more friends in the New Year !

SKA

CodeTRUCKER · « **Reply #4 on:** December 07, 2009, 05:23 PM »

Thanks f0dder - this is the only way I have felt comfortable having a private chat with family and friends over the Internet. Using prearranged passwords we are able to send attachments back and forth. I never felt that way using PGP, etc., but maybe I wasn't using them right. Now where did I put those Cody Coins...

f0dder · « **Reply #5 on:** December 07, 2009, 10:17 PM »

For mail I'd prefer PGP or S/MIME, if the people I'm communicating with have mail clients supporting it... integration w/mail client = easier to use, and you avoid pesky antivirus programs going apenuts over an attached .exe file.

But I guess a lot of people don't have support for PGP or S/MIME, or can't figure out how to use it - I guess fSekrit isn't the worst alternative then

CodeTRUCKER · « **Reply #6 on:** December 07, 2009, 10:31 PM »

Quote

...
But I guess a lot of people don't have support for PGP or S/MIME, or can't figure out how to use it - I guess fSekrit isn't the worst alternative then

Ahem... I ~~resent~~ resemble that remark!

I never understood them and was never able to make them work.

So... now you know the raw truth.

[CodeTRUCKER, head down with eyes lowered painfully walks toward the exit door of these hallowed halls of technological mensa, knowing the scharade is over!

Greybrow · « **Reply #7 on:** December 10, 2009, 10:26 AM »

Nice!
any hope for more features?

I'd like to have those:
1. Setting to choose if cursor should be at the beginning, the end or the last remembered position
2. Setting to paste current date/time on the end of file, on opening (as default for notepad with .LOG in the first line)

f0dder · « **Reply #8 on:** December 10, 2009, 10:34 AM »

Quote from: Greybrow on December 10, 2009, 10:26 AM

Nice!
any hope for more features?

Yep, I have a few more ideas before declaring the project "final"

Quote from: Greybrow on December 10, 2009, 10:26 AM

I'd like to have those:
1. Setting to choose if cursor should be at the beginning, the end or the last remembered position
2. Setting to paste current date/time on the end of file, on opening (as default for notepad with .LOG in the first line)

Good ideas - I'm planning to upgrade the container/document format so I can add arbitrary new settings without requiring further modification of the document format. Once that's done, saving settings like this per-document will be a breeze

Deozaan · « **Reply #9 on:** December 10, 2009, 05:47 PM »

Awesome! Thanks!

MerleOne · « **Reply #10 on:** December 20, 2009, 05:19 PM »

Hi,
I am starting to use it on a regular basis and I have a few suggestions/observations/questions :
1/ When a text has been saved in read-only, could it be possible to turn r/w on again, without creating a new file
2/ Would it be possible to enter a unique password at the beginning of a session so that files created next are all saved with the same password, which would reduce input errors.
3/ When typing the password at save time, could it be possible to un-hide the password (optionally)
4/ Is the support of "rich text" doable a in future version ?

Great tools as it is, but I feel this would improve my user experience even more...

Edited :
5/ Also, when I open a read-only note, select new, the new file is still read-only, so it's impossible to enter text.

f0dder · « **Reply #11 on:** December 20, 2009, 06:36 PM »

1) I've been considering this, but don't really know - the original request for read-only actually wanted it to be even more restrictive than it is. Which use-case leads to enabling and then disabling read-only mode?

2) You can already achieve this by choosing "Save As"... I could do a "don't clear passphrase on file->new" option, which would be easy for current version of fSekrit. However, it would be more intuitive for file->new to open a new fSekrit editor window, rather than the current method of just clearing the contents. If/when that is added, the cache feature would require passing the passphrase on the commandline (or some more complicated IPC method), which I don't really feel like doing. Commandline is a security risk, other IPC method is too much code overhead for too little win. I'll ponder a bit about this.

3) yep, and it's something I've wanted to add. Next version will have copy/paste disabled on the passphrase dialogs, but an "unmask password" checkbox (which will obviously clear whatever you've already typed when you unhide).

4) should be, considering I'm using a RichEdit control

- actually I'm currently specifying explicitly that I only want pure text on edit->paste, it'd be less code to acched rich formatted text. I do not plan on adding rich editing features to fSekrit, but pasting from an external document should be doable.

MerleOne · « **Reply #12 on:** December 20, 2009, 06:48 PM »

Thanks for you reply and this info.

The use case about read-only -> read/write is the following.

I open a new fsekrit window, import some text by dragndrop, save it as readonly, then I realize I want to modify something. Too late !

f0dder · « **Reply #13 on:** December 20, 2009, 09:15 PM »

That use-case sounds fair enough, but then we'll also have to consider why you enable read-only... as I interpret the original request, it was to avoid "tampering" with the encrypted notes. To achieve general "protect me against my fumble-finger saving", you could set the +R attribute on your file.

But let's have a discussion about this

. And if you have anything to say about the other four points (or anything else), let me know - I'm open for comments.

MerleOne · « **Reply #14 on:** December 21, 2009, 10:08 AM »

About the +R attribute, I thought at first it was equivalent to the 'read-only' feature and was looking for this attribute to be set (I never read the manual!).

Lifting the 'read-only' atttribute makes sense when you want to update the content of a note easily but not inadvertedly. If fsekrit could ask for the password when doing it, it would avoid accidental change of the note content and still give some flexibility ?

Regarding hide/unhide password , I understand the temptation for erasing but it would only enhance security in a not indispensable way. If you're in an "open" environnement, with some eyes behind you, you just don't leave your PC and don't unhide the password. I would keep the two input zones, without erasing, but simply unhidden. This would solve the important problem of Caps lock or numlock being activated and a different password being typed than the one you want, especially if you also remove copy/paste.

mxn · « **Reply #15 on:** December 23, 2009, 02:47 PM »

While I rarely use the read-only feature myself, I like the possibility to save permanently read-only files and I don't think you should make it possible to make them writable again. That would only reduce it's function to the previously mentioned "protect me against my fumble-finger saving", and I'm having a hard time imagining how you could both accidentally edit a document, AND accidentally save the document afterward. For people who need that you have the +R attribute.

MerleOne · « **Reply #16 on:** December 23, 2009, 03:00 PM »

My point is just that sometimes you realise you've used the read-on feature too soon ! And you are also just proving my point

by saying "I'm having a hard time imagining how you could both accidentally edit a document, AND accidentally save the document afterward". If so, there is no obstacle making it R/W again since you won't erase the read-only version unintentionally.

kamil929 · « **Reply #17 on:** May 19, 2010, 06:34 PM »

Is tere any chance to put twofish cipher into fSekrit 1.40 ? AES256 is not that strong than it justu be.

f0dder · « **Reply #18 on:** May 23, 2010, 03:19 PM »

Quote from: kamil929 on May 19, 2010, 06:34 PM

Is tere any chance to put twofish cipher into fSekrit 1.40 ? AES256 is not that strong than it justu be.

Nope, it's outside the scope of fSekrit, which is to stay LEAN_AND_MEAN. I really, really really wouldn't worry about AES-256 not being strong enough... not now, and not in the next umphteen years. If you're in a position where you could be compromised by anybody even remotely likely to be capable of breaking AES-256, I'd worry much more about Rubber-hose cryptanalysis.

Stoic Joker · « **Reply #19 on:** May 23, 2010, 04:27 PM »

a.k.a The carefully applied usage of excessive force...

Love the cartoon

AMWORLD · « **Reply #20 on:** May 29, 2010, 11:35 AM »

fSekrit is a cool little app I keep in my cypto toolbox. If only you wrote it to use Serpent instead of Rijndael, but your Rubber-hose cryptanalysis analogy is correct.

I prefer, Electric Cattle-prod decryption...

f0dder · « **Reply #21 on:** May 29, 2010, 12:09 PM »

Quote from: AMWORLD on May 29, 2010, 11:35 AM

I prefer, Electric Cattle-prod decryption...

I think the rubber hose method is better - you don't want to risk the neurological damage & amnesia that electric shock can introduce

marcopolo2 · « **Reply #22 on:** March 17, 2011, 11:41 AM »

thanks for the link, much appreciated

MerleOne · « **Reply #23 on:** March 17, 2011, 03:15 PM »

BTW, since I installed Avast V6 free, I keep getting annoyed by messages related to Avast Sandbox : it usually insists on executing it within a sandbox, and no rule to prevent this can be easily defined since the application is launched from the user temp folder with a different name each time, such as fSekrit-02C5.exe.

I could disable the sandbox altogether, but since most alarms come from fsekrit, maybe something else could be done ?

f0dder · « **Reply #24 on:** March 17, 2011, 06:16 PM »

MerleOne, you can use the "fsekrit.portable" approach to have the editor executable created in the same folder as the "document" itself - but it will still involve creating a temporary exe. Unfortunately there isn't really any way around this, a temporary exe is necessary in order to update the main exe. I've been pondering whether I should add a "installed" mode where a global installed fSekrit.exe is used as editor, but there's a few problems with that approach as well.