Re: Sync security question

2015-04-21 Thread Richard Newman
> > Thanks, this means I will indeed be able to use Sync once my > distribution ships 34 or later. > Sidenote: if your distribution is still shipping a release earlier than 34, you should probably find a new distribution, or stop using their version of Firefox. 33 shipped six months ago. You're m

Re: Sync security question

2015-04-21 Thread Ian Zimmerman
On Thu, 16 Apr 2015 08:47:02 +1000, Mark Hammond wrote: Ian> Since so far it looks like losing my laptop would have the effect Ian> of publishing my web passwords, I cobbled together my own Ian> semi-manual solution without Sync :( Mark> Note that enabling a master-password would help to protect

Re: Sync security question

2015-04-21 Thread Ian Zimmerman
On Thu, 16 Apr 2015 11:39:46 +1000, Mark Hammond wrote: Mark> The client *does* have keys and tokens it can use to fetch and Mark> decrypt your Sync data (derived from your Sync password), but Mark> these are also protected behind the master-password (ie, they are Mark> treated as a "password" ev

Re: Sync security question

2015-04-15 Thread Mark Hammond
On 16/04/2015 9:49 AM, Ian Zimmerman wrote: On Thu, 16 Apr 2015 08:47:02 +1000, Mark Hammond wrote: Ian> Since so far it looks like losing my laptop would have the effect Ian> of publishing my web passwords, I cobbled together my own Ian> semi-manual solution without Sync :( Mark> Note that en

Re: Sync security question

2015-04-15 Thread Mark Hammond
On 16/04/2015 4:00 AM, Ian Zimmerman wrote: Since so far it looks like losing my laptop would have the effect of publishing my web passwords, I cobbled together my own semi-manual solution without Sync :( Note that enabling a master-password would help to protect your passwords in this scena

Re: Sync security question

2015-04-15 Thread Ian Zimmerman
On Wed, 15 Apr 2015 09:37:30 -0700, Nicholas Alexander wrote: Nicholas> Hi Ian, Thanks for your reply, even if I had to wait a bit for it :) Ian> I have read that article and also [2], but there is still something Ian> bugging me about the new Sync. My Firefox (actually Iceweasel, Ian> wink) a

Re: Sync security question

2015-04-15 Thread Nicholas Alexander
On Wed, Apr 15, 2015 at 11:00 AM, Ian Zimmerman wrote: > On Wed, 15 Apr 2015 09:37:30 -0700, > Nicholas Alexander wrote: > > Nicholas> Hi Ian, > > Thanks for your reply, even if I had to wait a bit for it :) > > Ian> I have read that article and also [2], but there is still something > Ian> bugg

Re: Sync security question

2015-04-15 Thread Nicholas Alexander
Hi Ian, On Thu, Mar 12, 2015 at 11:37 AM, Ian Zimmerman wrote: > This is not a development question. Please forgive me if I trespass, > but I believe I have been told to do this by [1]. > > I have read that article and also [2], but there is still something > bugging me about the new Sync. My

Sync security question

2015-04-15 Thread Ian Zimmerman
This is not a development question. Please forgive me if I trespass, but I believe I have been told to do this by [1]. I have read that article and also [2], but there is still something bugging me about the new Sync. My Firefox (actually Iceweasel, wink) asks for the Accounts credentials the fi