Re: [gentoo-user] Encrypted drive setup at login and locking on logout.

2020-07-05 Thread Dale
William Kenworthy wrote:
> Hi Dale, I looked at Veracrypt and ran into the fact that it on windows
> Veracrypt MUST be installed by an administrator which is a blocker for
> using USB keys on computers I don't control (such as transporting files
> securely between locations - i.e., where there is potential to lose the
> usb key):
>
> see
> https://www.veracrypt.fr/en/Using%20VeraCrypt%20Without%20Administrator%20Privileges.html
>
> BillK
>

Does that mean that on windoze a person can open a encryted USB stick
without a password?  From what I read, it sounds like it doesn't put the
stick at risk, as long as you are not using key files or sharing your
password by storing it somewhere.  It just means you have to be admin to
install Veracrypt but not to access a encrypted USB stick.  From the way
it sounds, you insert USB stick, run Veracrypt, enter password, do what
you want with the stick, close it and then remove the stick.  Or am I
missing something? 

I might add, when I use cryptsetup and mount a external drive I use, I
do that as root.  Since my password is only in my head, no password, no
access root or not, right?

I'm new to this encrypted thing.  I'm learning but don't know all of it
and may never know all of it.  I figured out the other day that when I
select a two part or three part encryption, it actually encrypts the
thing twice or three times.  It's like having to pick two or three locks
on a door instead of one.  Only they have to be done in order and you
don't really have a way to know if you did it right until you figure out
the rest.  I bet that drives the NSA and other Govts nuts.  lol 

By the way, the USB stick will have instructions about things after I'm
buried or whatever.  I plan to keep the USB stick in a safe and share
the password with the person that will be taking care of things.  When
I'm gone, they can open the USB stick to access files on what to do and
such.  Until I'm gone, they won't know what is on the stick or have
access to it.  Getting older makes one think about these things.  :/ 
External drives will have things that when I'm gone, they gone too. 

I just wonder how many encryption tools have been cracked that we don't
know about.  It's not like they going to tell us or anything.

Dale

:-)  :-) 


Re: [gentoo-user] Encrypted drive setup at login and locking on logout.

2020-07-05 Thread William Kenworthy
Hi Dale, I looked at Veracrypt and ran into the fact that it on windows
Veracrypt MUST be installed by an administrator which is a blocker for
using USB keys on computers I don't control (such as transporting files
securely between locations - i.e., where there is potential to lose the
usb key):

see
https://www.veracrypt.fr/en/Using%20VeraCrypt%20Without%20Administrator%20Privileges.html

BillK


On 6/7/20 12:49 pm, Dale wrote:
> Dale wrote:
>> Howdy,
>>
>> As some know, I been playing with encryption recently.  I got doing
>> it on the command line and using veracrypt for USB sticks down.  I
>> use Veracrypt for those that I want to work on windoze as well, I
>> hope anyway.  Now I'm moving on to something else. 
>>
>> Now that I have a spare drive, I want to encrypt it and have a mount
>> point for it, /home/dale/documents for example.  What I'd like to do,
>> when I login in, it asks me for the encryption password and then
>> mounts it.  When I log out, it reverses.  I'm not doing all of /home
>> because I want to separate some info.  I may do it later. 
>>
>> I did some googling but maybe my search terms aren't good enough.  I
>> mostly find for /home as a whole but not separate parts of it.  When
>> I add in Gentoo does some things differently, it may be that this
>> isn't even doable.  Also, my user password and password for the
>> encryption will be different.  I'm using KDE but anything that will
>> work as part of KDE or along with KDE will be fine with me. 
>>
>> Does anyone have a howto they can link to?  Is this even doable? 
>>
>> Thanks.
>>
>> Dale
>>
>> :-)  :-) 
>
>
> Digging around I found these. 
>
> [ebuild  N    ~] sys-fs/ecryptfs-utils-111_p20170609::gentoo  USE="gtk
> nls pam -doc -gpg -openssl -pkcs11 -python -suid -tpm"
> PYTHON_SINGLE_TARGET="python2_7" 1,401 KiB
> [ebuild  N ] sys-fs/cryptmount-5.3.2::gentoo  USE="gcrypt
> largefile luks nls openssl udev -argv0switch -cswap -fsck -mount
> (-selinux) -systemd" 533 KiB
>
> Looking at the info I've found tho, I don't think it will do what I'm
> looking for.  Has anyone used either of these in the past?  If so,
> does one of these do what I'm looking for?
>
> I'm surprised someone hasn't come up with this before.  Surely I'm not
> the only one who would like a automatic way to decrypt, mount, umount
> and encrypt with some sort of automated process.  Sort of like a USB
> stick only with encryption. 
>
> Dale
>
> :-)  :-) 



Re: [gentoo-user] Encrypted drive setup at login and locking on logout.

2020-07-05 Thread Dale
Dale wrote:
> Howdy,
>
> As some know, I been playing with encryption recently.  I got doing it
> on the command line and using veracrypt for USB sticks down.  I use
> Veracrypt for those that I want to work on windoze as well, I hope
> anyway.  Now I'm moving on to something else. 
>
> Now that I have a spare drive, I want to encrypt it and have a mount
> point for it, /home/dale/documents for example.  What I'd like to do,
> when I login in, it asks me for the encryption password and then
> mounts it.  When I log out, it reverses.  I'm not doing all of /home
> because I want to separate some info.  I may do it later. 
>
> I did some googling but maybe my search terms aren't good enough.  I
> mostly find for /home as a whole but not separate parts of it.  When I
> add in Gentoo does some things differently, it may be that this isn't
> even doable.  Also, my user password and password for the encryption
> will be different.  I'm using KDE but anything that will work as part
> of KDE or along with KDE will be fine with me. 
>
> Does anyone have a howto they can link to?  Is this even doable? 
>
> Thanks.
>
> Dale
>
> :-)  :-) 


Digging around I found these. 

[ebuild  N    ~] sys-fs/ecryptfs-utils-111_p20170609::gentoo  USE="gtk
nls pam -doc -gpg -openssl -pkcs11 -python -suid -tpm"
PYTHON_SINGLE_TARGET="python2_7" 1,401 KiB
[ebuild  N ] sys-fs/cryptmount-5.3.2::gentoo  USE="gcrypt largefile
luks nls openssl udev -argv0switch -cswap -fsck -mount (-selinux)
-systemd" 533 KiB

Looking at the info I've found tho, I don't think it will do what I'm
looking for.  Has anyone used either of these in the past?  If so, does
one of these do what I'm looking for?

I'm surprised someone hasn't come up with this before.  Surely I'm not
the only one who would like a automatic way to decrypt, mount, umount
and encrypt with some sort of automated process.  Sort of like a USB
stick only with encryption. 

Dale

:-)  :-) 


Re: [gentoo-user] unable to login some websites using www-client/firefox-68.9.0

2020-07-05 Thread Matt Connell (Gmail)
On Sun, 2020-07-05 at 12:36 -0500, Valmor F. de Almeida wrote:
> However at some other websites that require 
> 
> username/password, I am not able to log in. I have cleared the
> cache, 
> 
> deleted all cookies, etc. Still problematic. I don't get any errors
> upon 
> 
> login. Just get straight back to the original site prompting for the 
> 
> username and password.

This is almost certainly a problem with your cookie or privacy
settings, rather than with how FF is built.

Try launching FF with a new profile to see if that fixes it. From a
terminal, like this: firefox -p

Then try making a new profile with default settings, and see if you can
log in with that profile.  If you can, then something in the settings
on your original profile is to blame.

(Disclaimer, there may be easier ways to manage profiles in FF but
launching it with -p is what has always worked for me, YMMV).




Re: [gentoo-user] unable to login some websites using www-client/firefox-68.9.0

2020-07-05 Thread Серега Филатов
Maybe "do not track" causes this issue?
Are you able to log in on firefox-bin? Another browser? Another system in
your network?

On Sun, Jul 5, 2020, 20:36 Valmor F. de Almeida 
wrote:

>
> Hello list:
> I have emerged www-client/firefox-68.9.0 and I am able to log in to, say
> google email accounts, etc. However at some other websites that require
> username/password, I am not able to log in. I have cleared the cache,
> deleted all cookies, etc. Still problematic. I don't get any errors upon
> login. Just get straight back to the original site prompting for the
> username and password.
>
> Just checking on this list whether I used all USE flags correctly when
> emerging firefox:
> bindist, gmp-autoupdate, pulseaudio, screenshot, system-av1,
> system-harfbuzz, system-icu, system-jpeg, system-libevent,
> system-libvpx, system-sqlite, system-webp.
>
> I only have two add-ons: flag and dark background loaded.
>
> Inputs appreciated.
> Thanks,
> --
> Valmor
>
>


[gentoo-user] unable to login some websites using www-client/firefox-68.9.0

2020-07-05 Thread Valmor F. de Almeida



Hello list:
I have emerged www-client/firefox-68.9.0 and I am able to log in to, say 
google email accounts, etc. However at some other websites that require 
username/password, I am not able to log in. I have cleared the cache, 
deleted all cookies, etc. Still problematic. I don't get any errors upon 
login. Just get straight back to the original site prompting for the 
username and password.


Just checking on this list whether I used all USE flags correctly when 
emerging firefox:
bindist, gmp-autoupdate, pulseaudio, screenshot, system-av1, 
system-harfbuzz, system-icu, system-jpeg, system-libevent, 
system-libvpx, system-sqlite, system-webp.


I only have two add-ons: flag and dark background loaded.

Inputs appreciated.
Thanks,
--
Valmor