Comments for Ari's Blog

Comment on Password Hasher Plus by Ari

Ari — Thu, 17 Mar 2011 10:09:29 +0000

Hi Nolan,

You are right IE 8 and 9 do not work with the online hash generator.

I recommend using chrome which works well with the on-line hash generator.
-Ari

Comment on Password Hasher Plus by Nolan

Nolan — Wed, 16 Mar 2011 18:19:29 +0000

The javascript/html site does not work for me with internet explorer 8 or 9.

Comment on Password Hasher Plus by Brian White

Brian White — Thu, 02 Dec 2010 10:01:10 +0000

I just started using this and can contribute a few things:

Reversing the hash to obtain the master password is so impractical that it might as well be impossible. Knowing one generated password would not be enough since there are many (billions? trillions? billions of trillions?) potential master passwords that would generate the known password but only one would generate correct passwords for other sites. So not only is this computationally infeasible, there are surely a great many weaker passwords that an attacker will try first.

There is (now) a pure html/javascript version reachable from his “developer website”. I put a copy of it on the SD-card of my Android phone for access anywhere (though not as convenient as having the extension installed), though using it is dangerous (see below).

DO NOT, UNDER ANY CIRCUMSTANCES, USE EITHER THE EXTENSION OR WEB-VERSION ON AN UNTRUSTED COMPUTER! You have to type your master password (and site-key, if used) and at that point a listener (keylogger, shoulder surfer, etc.) has all your passwords!

If you use a generated password from a trusted device (e.g. your phone) to access an account via an untrusted computer, “bump” (change) the password for that account using a trusted computer as soon as possible. At least you’ve only compromised one account.

Set an easy to remember “site key” so that you can operate on multiple (trusted) devices. If you don’t, then knowing the master password is sufficient to know all your passwords. Since you have to type your master password in the site’s password box and then click a “hash” button to convert it, you run the risk of forgetting to click the button and accidentally submitting your master password to that site. It’ll reject it, of course, but it’s always possible it was sniffed or recorded in the process. Also, a malicious website could send every character back to the server, thus acquiring your master password as you type it before hashing it. With an additional “site key”, knowing the master password is not sufficient.

– Brian

Comment on PuTTY Connection Manager by Raman

Raman — Sun, 14 Nov 2010 04:00:37 +0000

Even I had the same problem and was able to fix it by changing the hotkeys in options window.. check the FAQ here.. Configuring putty connection manager

Comment on Password Hasher Plus by Ben

Ben — Thu, 14 Oct 2010 01:00:00 +0000

Thanks for the info, Ari! Just to be a little more cautious, I’m making each site key and my ‘important’ masters unique. This is still much easier! Before this I was using an algorithm I made up, but it was a huge PITA for me to use on sites that I had not memorized the password.

Comment on Password Hasher Plus by Ari

Ari — Tue, 12 Oct 2010 14:10:32 +0000

Hi Ben,

In general I don’t like to say things are impossible. It is very very difficult to reverse the password if you have the password and the site tag but it is not impossible. If nothing else it could be discovered via a brute force attack. Brute force attacks are very hard on a long/complex password. In short You should always safeguard your master key. I am not concerned that if one password is compromised that others will be. It is a risk but I believe a very small one.

-Ari

Comment on Password Hasher Plus by Ben

Ben — Tue, 12 Oct 2010 05:37:23 +0000

Thanks Ari — yeah, I figured this out after playing with it for a bit. Another question– is it possible for anyone to un-hash & figure out your ‘master’ password if they know the hashed password and the site tag/key?

Comment on Password Hasher Plus by Ari

Ari — Mon, 11 Oct 2010 11:48:59 +0000

Hi Ben,

In order to use the online hasher with the plug-in the plug-in must be set to compatibility mode. The author is working on a new web page that will allow for use of a private key. Until then I would recommend working in compatibility mode.

Hope this helps,

Ari

Comment on Password Hasher Plus by Ben

Ben — Mon, 11 Oct 2010 05:18:23 +0000

I don’t see where I put in my private key in this online/downloadable version… and the passwords its generating do not match my ones using the Chrome extension. What am I doing wrong?

Comment on Foxit Reader by Yehezkel

Yehezkel — Tue, 17 Aug 2010 21:49:12 +0000

A cool feature of Outlook 2007 and Windows Vista or 7 is the ability to preview pdf files without actually opening them. MS gives this functionality to work with Acrobat Reader. However, it exists for Foxit as well. http://www.mydigitallife.info/2007/03/07/foxit-pdf-preview-handler-free-download/ describes this feature.
The PDF Preview Handler can be downloaded from http://www.box.net/shared/7zz5xcy048. There is a version for XP as well (to preview within Outlook 2007)

Comment on Icon Restore by Ari

Ari — Fri, 13 Aug 2010 08:05:53 +0000

Yehezkel – Windows 7 has this functionality built in.

Once you have your icons the way you want them, right click on the desktop and choose “Save Desktop Icon Layout”.

To restore the icon layout right click on the desktop and choose “Restore Desktop Icon Layout”

Comment on Icon Restore by Yehezkel

Yehezkel — Thu, 12 Aug 2010 20:14:12 +0000

Just got Win7 and icon_restore didn’t work.
Found a similar utility which the CNET editors rated 5/5.

http://fsl.sytes.net/iconrestorer.html

Comment on VLC for all your media playback needs by Noah Roth

Noah Roth — Thu, 12 Aug 2010 14:06:31 +0000

Streaming content.

Comment on VLC for all your media playback needs by Ari

Ari — Mon, 09 Aug 2010 16:52:19 +0000

Hi Noah,

I am not sure about the foreground issue. It seems more OS related. I am looking into it.

Regarding the second issue – Are you referring to local media or streaming content?

Comment on VLC for all your media playback needs by Noah Roth

Noah Roth — Mon, 09 Aug 2010 13:45:53 +0000

There are two things that I don’t like about VLC:
1) The window does not take the foreground when a new clip starts (and to my knowledge there is no setting to correct this), and
2) It buffers like WMP instead of downloading the whole clip before beginning playback.

Comment on codecs by VLC Media Player. Must have software | Ari's Blog

VLC Media Player. Must have software | Ari's Blog — Sun, 08 Aug 2010 10:12:19 +0000

[...] at VLC it has handled it without an issue. VLC does not require the installation of additional codecs. It plays most every file immediately after installation. VLC is also skinable so you can [...]

Comment on Password Hasher Plus by Ari

Ari — Wed, 04 Aug 2010 09:26:35 +0000

Password hasher is based on the Wijjo code. You can download the online page (http://wijjo.com/passhash/passhash.html) and generate the hashes locally so you are not dependent on on-line resources. I keep a copy of the passhash.html in my dropbox folder so I alwways have access to it when on-line.

Comment on Password Hasher Plus by Melvyn

Melvyn — Wed, 04 Aug 2010 09:04:55 +0000

Does it use a “standard” for generating the hashes? I’m concerned about the specific service going down or disappearing and then having no other way to generate the hash in the future.

Comment on The cAPS lOCK key is DEAD! Long live the Caps Lock Key! by Rudy Knueppel

Rudy Knueppel — Wed, 16 Jun 2010 02:42:05 +0000

Hi thank you for this entry.

Comment on Foxit Reader by Mordy

Mordy — Mon, 19 Apr 2010 21:07:36 +0000

When I add a bookmark to foxit it will not save under a hebrew file name. Any suggestions?

Comment on True Combat: Elite by sandrar

sandrar — Thu, 10 Sep 2009 13:55:40 +0000

Hi! I was surfing and found your blog post… nice! I love your blog. Cheers! Sandra. R.

Comment on True Combat: Elite by carl

carl — Thu, 10 Sep 2009 13:38:43 +0000

so many people work very hard to keep Enemy Territory alive.
somebody makes maps.sounds.bots, etc
these people are one of a kind. They get nothing for doing the work. And it takes up so much time. so a big thank you to all people working very hard on
Enemy Territory. without you game would die.

So next time you play on game, and see something really good sounds.map.ect.
Let the server host Know he/she is doing a good job.

Comment on PuTTY Connection Manager by sharfah

sharfah — Mon, 03 Aug 2009 12:44:55 +0000

Nice tool BUT
does anyone know how I can disable the Ctrl+R (rename tab) key binding?
Ctrl+R is really useful for reverse-command search in bash, but Putty Connection Manager always throws up an annoying Rename Tab dialog!

Comment on Task Switch XP by Vince Delmonte

Vince Delmonte — Tue, 14 Apr 2009 20:57:13 +0000

Hey, cool tips. I’ll buy a glass of beer to that person from that forum who told me to visit your blog

Comment on codecs by Ronen Amity

Ronen Amity — Sun, 15 Mar 2009 09:40:07 +0000

just use gom player.

it has the ability to update the codacs automaticly.

Comment on codecs by melvyn

melvyn — Thu, 05 Mar 2009 19:46:37 +0000

I disagree about the best option. The last 3 machines I’ve setup have zero codecs installed. I use TheKMPlayer as my default media player and haven’t installed or updated a codec in years – they’re all built in and seamless to the user.
Receommend you give it a shot. It also has one other killer feature: it automatically remembers where you’re up to in every file you’ve played with it.

Comment on Foxit Reader by Yehezkel

Yehezkel — Tue, 03 Mar 2009 16:07:36 +0000

I installed Foxit 3.0 and find that it does support Hebrew file names. Now I am a happy camper—I can use Foxit instead of the bloated A—e Reader.

Comment on Foxit Reader by Ari

Ari — Fri, 27 Feb 2009 10:26:51 +0000

That is odd. I tried opening files on my system and it works fine. You might need to check your Regional and Language options to ensure that you are using Hebrew as your language for non Unicode programs.

Comment on Foxit Reader by Yehezkel

Yehezkel — Fri, 27 Feb 2009 07:31:13 +0000

There is one drawback for those of us who have Hebrew file names: Foxit cannot recognise them.

Comment on Icon Restore by Cesar B. aka the Mover

Cesar B. aka the Mover — Thu, 06 Nov 2008 21:49:01 +0000

This Blog reminds me the reason I like bloging so much, the interaction is very important with readers and you guys have it right. Looks great too, will be back for more posts, David the mover. : – )

Comment on HexTool by jspark

jspark — Thu, 14 Aug 2008 12:59:39 +0000

Thanks

Comment on Ditto by yehezkel

yehezkel — Tue, 19 Feb 2008 19:35:12 +0000

I’ve used Yankee Clipper for years (“careware” version)
Provides similar functionality plus:
* boiler plates
* filtering by format (e.g., text, graphic, url)
Excellent tool

Comment on Icon Restore by ym

ym — Sun, 11 Nov 2007 12:10:35 +0000

Strange behaviour. I have one icon to which it doesn’t relate. Restores all the others but doesn’t move that one.

Comment on Icon Restore by ym

ym — Sun, 11 Nov 2007 11:55:06 +0000

Thank you. This has annoyed me (p.o.’ed) for years.

Comment on GimpShop by Ari

Ari — Mon, 29 Oct 2007 13:52:43 +0000

You should try the latest version. Gimp and GimpShop have come a long long way.

Comment on GimpShop by Rafi

Rafi — Mon, 29 Oct 2007 08:51:27 +0000

The question is also whether the memory usage is better than in Gimp.

I had several problems working with Gimp. Firstly having to rename two DLLs in my System32 folder never really appealed to me. Secondly the GUI – but you can get used to that – and thirdly I found that if I opened several iamges at once to edit then I quickly ran out of resources.

Comment on AVI2DVD by Ari

Ari — Thu, 18 Oct 2007 19:19:19 +0000

Results will vary based on the codecs used to encode the video.

Comment on AVI2DVD by msorgen

msorgen — Mon, 26 Mar 2007 23:07:10 +0000

This is absolutely terrible. I spent 2 hours converting it and the audio came out garbled. I tried the other choice and it took 4 hours and the audio was a little bit better but still terrible.
I wouldl ook for another source to use.

Comment on PDFcreator by Richard Kligman

Richard Kligman — Thu, 01 Mar 2007 13:47:46 +0000

Really cool links here Ari. At first I thought this blog would be too technical for me, but I already found two things I have downloaded. Thanks!

Austin

Comment on PDFcreator by carlygrant

carlygrant — Fri, 09 Feb 2007 04:06:14 +0000

I tested around 10 different PDF applications for my own small office (including PDFCreator and pdf995). I couldn’t pay craploads for Adobe Acrobat, so I needed something cheaper and just as reliable and feature rich. After a month or so of intense evaluation, I bought 10 licenses of Nitro PDF Professional http://www.nitropdf.com. It’s been reliable and cost-effective for my small business…

Comment on Dust by Pa

Pa — Sun, 04 Feb 2007 04:08:20 +0000

We all live in hope……and will be waiting

Comment on Unlocker by Andy

Andy — Thu, 06 Jul 2006 21:02:20 +0000

Oh, now THAT is nice… If I had a nickel for every time I’ve had to reboot after that message….

Comment on cAPS lOCK part 2 by Ari

Ari — Wed, 05 Jul 2006 09:32:28 +0000

Good point Max. You can literally remap any key in to any other key – well except the “any” key.

Comment on cAPS lOCK part 2 by Max

Max — Tue, 04 Jul 2006 09:27:51 +0000

You forgot the most important aspect of KeyTweak – it gives you the possibility of a Windows key and a context key on a ThinkPad without an external keyboard

Comment on The cAPS lOCK key is DEAD! Long live the Caps Lock Key! by Ari

Ari — Tue, 20 Jun 2006 08:36:49 +0000

The advantage of using a registry fix over a utility is that you can choose what you want your caps lock key to do and it does not take any additional memory the way a utility does.

Don’t get me wrong – do what works for you If you like utility’s use them. I like the registry fix for this -is costs no memory and is very flexible.

Comment on The cAPS lOCK key is DEAD! Long live the Caps Lock Key! by DannyS

DannyS — Tue, 20 Jun 2006 08:04:14 +0000

I’ve had AntiCapsLock in my StartUp for years. It makes *that* key behave like the Shift key. It’s archived in places like http://www.thedance.net/~win95/ and still work in XP.

Comment on PDFcreator by melvynadam

melvynadam — Tue, 13 Jun 2006 09:45:09 +0000

Unfortunately PDFCreator doesn’t convert Word TOCs into clickable links the same way as PDF995 (also freeware). Additionally, PDFEDIT995 adds tonnes of features that PDFCreator doesn’t have.

PDFCreator is fine for quick and simple jobs. For a more professional output with many of the Adobe features I’d stick with pdf995 from http://www.software995.com/

Comment on The cAPS lOCK key is DEAD! Long live the Caps Lock Key! by melvynadam

melvynadam — Tue, 13 Jun 2006 09:40:18 +0000

Personally, I’m not offended by the existence of the Caps Lock key. I’m more offended by the very limited functionality. Fortunately, I found CAPshift to greatly enhance the possibilities for this pretty basic button:
http://www.donationcoder.com/Software/Skrommel/index.html#CAPshift

Comment on Passwords… by melvynadam

melvynadam — Tue, 13 Jun 2006 09:36:58 +0000

If you want a general password manager that syncs with your PDA (PalmOS and Windows Mobile) I would recommend trying out eWallet from Ilium Software. It’s not Open Source or free but it’s superb and enables you to carry passwords with you everywhere.

Comment on Passwords… by Ari

Ari — Sun, 11 Jun 2006 05:01:54 +0000

Roboform is deigned for passwords for websites. KeePass is more of a general password manager, KeePass is also opensource which is always a plus in my book.