SpiderOak / Encryptr

Encryptr is a zero-knowledge cloud-based password manager / e-wallet powered by Crypton
GNU General Public License v3.0
1.58k stars 138 forks source link

Unable to login "Uncaught node.js Error " #324

Open intothemoat opened 3 years ago

intothemoat commented 3 years ago

Hey dudes, dudettes. I'm trying to login this am and everytime I attempt to hit unlock I get this error "Uncaught node.js Error "

Any suggestions?

Vertimyst commented 3 years ago

Getting the same issue here, happening on both of our systems (one running Fedora, the other Mac OS High Sierra).

Update: Just tried it again and it seems to be working now.

megasser commented 3 years ago

Happening to me too. Encryptr 2.0.0. Mac OS 10.15.7. A real pain since I'm stuck unable to log in to many things.

vauhochzett commented 3 years ago

Same here... Encryptr 2.1.0 Ubuntu 20.04.2 LTS

Uncaught node.js Error 

TypeError: Cannot read property 'success' of null
    at file:///tmp/.org.chromium.Chromium.dMOW3V/js/crypton.js:59:17
    at Request.callback (file:///tmp/.org.chromium.Chromium.dMOW3V/js/crypton.js:9458:3)
    at Request.<anonymous> (file:///tmp/.org.chromium.Chromium.dMOW3V/js/crypton.js:9183:10)
    at Request.Emitter.emit (file:///tmp/.org.chromium.Chromium.dMOW3V/js/crypton.js:8669:20)
    at XMLHttpRequest.xhr.onreadystatechange (file:///tmp/.org.chromium.Chromium.dMOW3V/js/crypton.js:9528:10)
oleng commented 3 years ago

Since encryptr is already sunsetting but we can't even log in, this needs to be resolved ASAP

paging encryptr @devgeeks & co

PS: I didn't receive any notice about sunsetting or its timeline, I would only like be able to login & export my user passwords list

megasser commented 3 years ago

Nobody received a notice about this. Just discovered the sunsetting on their website, and the instructions for switching over to other services don't work, at least not for Mac OS. So I'm stuck with no access to 100 passwords until the weekend when they say they'll be turning on their services again briefly for folks like us.

oleng commented 3 years ago

Damn, that's a lot more worrying than I thought, need to make sure to get data out from their other product as well

vauhochzett commented 3 years ago

@megasser where did you read about them giving access to our data this weekend?

Greyswindire commented 3 years ago

I can't believe this is happening. What time will they be giving us access to our data this weekend? All of my important passwords are on Encryptr. I never got any sort of notification at all.

megasser commented 3 years ago

All I know is what's here: https://spideroak.support/hc/en-us/articles/360056547132-Encryptr-end-of-life They don't say what time on the weekend we'll be able to access our data. Yeah, this is a disaster!

devgeeks commented 3 years ago

I really glad SpiderOak is granting some kind of stay of execution this weekend for the users that didn't know about the March 4th EOL. I am sorry you have been affected by this.

I haven't worked on Encryptr for about 4 years now... but... For any one not able to take advantage of that (or for some reason you are reading this after the weekend amnesty)... not all hope is lost... the app does cache the encrypted entries locally in localStorage. It might be possible to concoct a tool or script to decrypt that local cache.

I might be able to help out with such a tool/script, though I hope it's not needed.

oleng commented 3 years ago

I hope so too, man, I kind of suspect that the decryption key to unlock local storage is acquired from Spider oak's server and that's why node complains about unknown error when it can't reach the given address.

Greyswindire commented 3 years ago

I was always worried about this happening, I just didn't expect it to happen so soon. Thanks Megasser, I appreciate the link. I downloaded and installed the version that should help me migrate my data this weekend. Hopefully we'll have a full 48 hours to work with.

Greyswindire commented 3 years ago

Devgeeks,

Yeah, hopefully we won't need your help, but if we do, I appreciate the offer.

vauhochzett commented 3 years ago

Cheers, @megasser and @devgeeks! That's very helpful.

devgeeks commented 3 years ago

I hope so too, man, I kind of suspect that the decryption key to unlock local storage is acquired from Spider oak's server and that's why node complains about unknown error when it can't reach the given address.

No no... it's all encrypted locally. SpiderOak have no access to any keys, etc. The error is just because the app doesn't recover gracefully from a login failure :(

Greyswindire commented 3 years ago

I hope so too, man, I kind of suspect that the decryption key to unlock local storage is acquired from Spider oak's server and that's why node complains about unknown error when it can't reach the given address.

No no... it's all encrypted locally. SpiderOak have no access to any keys, etc. The error is just because the app doesn't recover gracefully from a login failure :(

What would the file look like in the Encryptr folder on my hard drive? I'm a little sketched out after installing the new version of the program (so I can retrieve my passwords this weekend) , but I guess it didn't change anything that was in the original install, right? I didn't uninstall the first version because the directions made no mention to do so. I figured uninstalling the old version manually would have erased something that I need for the weekend, is that right?

Thanks.

oleng commented 3 years ago

I worded it badly I suppose, but what I meant by decryption is mechanism to verify that the user requesting login is indeed the right identity/Encryptr user who has right to use decyption key to unlock the vault/local storage. Well, all that matters is that the data can be recovered, so fingers crossed.

devgeeks commented 3 years ago

I hope so too, man, I kind of suspect that the decryption key to unlock local storage is acquired from Spider oak's server and that's why node complains about unknown error when it can't reach the given address.

No no... it's all encrypted locally. SpiderOak have no access to any keys, etc. The error is just because the app doesn't recover gracefully from a login failure :(

What would the file look like in the Encryptr folder on my hard drive? I'm a little sketched out after installing the new version of the program (so I can retrieve my passwords this weekend) , but I guess it didn't change anything that was in the original install, right? I didn't uninstall the first version because the directions made no mention to do so. I figured uninstalling the old version manually would have erased something that I need for the weekend, is that right?

Thanks.

Well, for example... on a Mac, the file is in ~/Library/Application Support/Encryptr/Local Storage/file__0.localstorage

You can read the file in sqlite3, etc... but the entries are one big encrypted string. The script/tool would have to accept a username/password combination, read that cache, then decrypt the entries and spit them out using the export logic in Encryptr (to make it easier to then move it to another app).

IronRunes commented 3 years ago

All I know is what's here: https://spideroak.support/hc/en-us/articles/360056547132-Encryptr-end-of-life They don't say what time on the weekend we'll be able to access our data. Yeah, this is a disaster!

It is currently possible to login into Encryptr, though I'm having issues getting all the data synced up and activating the download button. I'll be doing this manually, I guess. Pretty painful.

EDIT ok managed to download the CSV!

Greyswindire commented 3 years ago

I just wanted to remind everyone today is the day. Encryptr is up and running.

I clicked on the download icon and right now the program is syncing my data. How long is this process supposed to take? It's been a few minutes so far and nothing is really happening?

Right now it says it's fetching my data. It's been like this for about five minutes. The program crashed and I got the node error message again. I was able to open it once to see if I could open individual entries. It worked, then it stopped working. I'm trying to get back in right now.

Update:

I just got the "Uncaught node.js Error"

Maybe they're restarting the servers or something? This is a little frustrating. It shouldn't be so difficult.

dpenders commented 3 years ago

Also just installed new version and waiting for sync but at the end i still get the "Uncaught node.js error"

Really hope to get it working this weekend, really need the saved data........

Vertimyst commented 3 years ago

Also getting the same node.js error after it sits syncing forever. No chance to click the download button. Would be cool if someone in the community could set up a server for Encryptr even for just a little while so we can get our data back.

On Sat., Mar. 6, 2021, 11:07 a.m. dpenders, notifications@github.com wrote:

Also just installed new version and waiting for sync but at the end i still get the "Uncaught node.js error"

Really hope to get it working this weekend, really need the saved data........

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/SpiderOak/Encryptr/issues/324#issuecomment-791978840, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAK5A5LIJ6IB4SXLBIHC3GTTCJHLNANCNFSM4YEXHU2Q .

oleng commented 3 years ago

I got one uncaught error also, quit & retry to login, now i'm logged in but WTF why is it keep on Fetching data...?

Vertimyst commented 3 years ago

That's all mine was doing too. I'm out at the moment so I haven't been able to try it again. I suspect the server may be overloaded with everyone trying to access their data.

On Sat., Mar. 6, 2021, 11:19 a.m. oleng, notifications@github.com wrote:

I got one uncaught error also, quit & retry to login, now i'm logged in but WTF why is it keep on Fetching data...?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/SpiderOak/Encryptr/issues/324#issuecomment-791980986, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAK5A5NLCRQSDRJDDC6OIQTTCJIYNANCNFSM4YEXHU2Q .

oleng commented 3 years ago

There's supposed to be nothing to fetch on

mdvthu commented 3 years ago

Logs on sometimes. Fails with "uncaught error" message other times. No pattern to when it logs in or when it fails. Assume server overload.

If you view the console output as it fetches data, you will see that your passwords are being downloaded, just very slowly. If you have many, it will probably fail (with an uncaught error) before it completes.

This essentially makes the download feature unusable for anyone with lots of passwords stored. It's not great as the more passwords you have, the more you want the batch download feature to work for you.

I can recommend keepass2 for those that want to keep full control of their passwords in the future.

Greyswindire commented 3 years ago

I got one uncaught error also, quit & retry to login, now i'm logged in but WTF why is it keep on Fetching data...?

I get the same thing. I tried a few entries on their own, so I could take s snapshot of the data and manually add it into my new password manager, but it stopped working after for or five entries and now it's back to displaying the same error again. I'm going to try the download button again, hopefully it works, because taking 100 snapshots of each individual entry is seriously time consuming, and the program is behaving erratically anyway.

megasser commented 3 years ago

Crap. After 15 minutes waiting for the fetching to finish, I got the uncaught error. Will try again later.

Greyswindire commented 3 years ago

Crap. After 15 minutes waiting for the fetching to finish, I got the uncaught error. Will try again later.

The server must be getting swamped by so many people trying to access their data. Looks like this is a job best done at 3:00am in the morning when everyone is asleep.

oleng commented 3 years ago

I would bet Dave Pearah's left nut that there are at least 3x more users than us that don't even aware how screwed up they are right now, and the "turning back on their services for the last time" this weekend is spinning up a single server instead of full capacity.

Greyswindire commented 3 years ago

I would bet Dave Pearah's left nut that there are at least 3x more users than us that don't even aware how screwed up they are right now, and the "turning back on their services for the last time" this weekend is spinning up a single server instead of full capacity.

Sadly, you're most definitely correct. After not letting us know they would be discontinuing Encryptr, and after we missed the end date, they'll act like they're doing us a favor by giving us these last two days. What good will these two days be if we can't access our data due to the servers being swamped? Any why not just put the service back online fully, so everyone can get what they need hassle free? It's not the best way to advertise one's products for future buyers.

Greyswindire commented 3 years ago

Finally!

The server is up and it seems to be working properly! As soon as you get your csv file, just import it to Bitwarden and all of your passwords and accompanying information will be exactly as it was in Encryptr. Even better, Bitwarden has more features then Encryptr. It will launch the website for you and you have a lot more freedom to organize your information the way you like it. It seems like a pretty good service so far (It's free!).

megasser commented 3 years ago

Succeeded on my 5th attempt. Whew.

oleng commented 3 years ago

Now the cleanup & moving out of other SpiderOak products.
I second bitwarden, one of the good thing about it is that you can compile the server yourself & host it anywhere, in Rust if you're not in Windows or don't have the prerequisites for compiling .NET.

Best of luck everyone.

ajspandigital commented 3 years ago

Well, I only found out about this today - and now I have a lot of things I will soon have serious problems logging into.

If there is no way to log in anymore, how can I decrypt local storage ? @devgeeks perhaps you can help ?

juancirino commented 3 years ago

same here I just found out. Iam surprised that they are basically shutting something down with no notice and basically screwing people out of there information with out any warning. Just a great bunch of people.

Vertimyst commented 3 years ago

Technically it wasn't without notice - they posted the news they were shutting down on the front page of the Encryptr website back in November, which is plenty of notice, and they've explained they had no way to reach out directly to users because not everyone has their email registered with them. I do think they could have pushed an update out to Encryptr that could have had a banner or pop-up message or something, though.

On Thu., Mar. 11, 2021, 7:33 p.m. juancirino, @.***> wrote:

same here I just found out. Iam surprised that they are basically shutting something down with no notice and basically screwing people out of there information with out any warning. Just a great bunch of people.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/SpiderOak/Encryptr/issues/324#issuecomment-797149401, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAK5A5PQVO5LPQWX7QIGR2TTDFONFANCNFSM4YEXHU2Q .

agrigorcea commented 3 years ago

Yeah, a banner with notification would have been useful. I hope they will turn on the server from time to time.

Greyswindire commented 3 years ago

Technically it wasn't without notice - they posted the news they were shutting down on the front page of the Encryptr website back in November, which is plenty of notice, and they've explained they had no way to reach out directly to users because not everyone has their email registered with them. I do think they could have pushed an update out to Encryptr that could have had a banner or pop-up message or something, though. On Thu., Mar. 11, 2021, 7:33 p.m. juancirino, @.***> wrote: same here I just found out. Iam surprised that they are basically shutting something down with no notice and basically screwing people out of there information with out any warning. Just a great bunch of people. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#324 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAK5A5PQVO5LPQWX7QIGR2TTDFONFANCNFSM4YEXHU2Q .

That's not a proper notice. How many people visit the product page on program they've been using for years out of the blue? A proper notice would have been an email from the company (or an update of the program to notify users) explaining they'd be retiring all support for the program in question, stating that users had a limited time frame to migrate all of their passwords and private information to a new service before the program was shut down permanently.

Do you know how I found out? When I logged into Encryptr I received an error message and I was unable to access any of my passwords. That error message lead me to Googling the SpiderOak website. I had already missed the end date of March 4th by a few hours. Luckily the company added on two more days the following weekend where they would be turning on their servers because a large number of users had no knowledge the program was being discontinued.

So yeah, technically it was without notice. Notice means someone actually contacts the customer so they're not left hanging in the dark with no way to retrieve their most important passwords. You sound like a shady two-bit lawyer.

VictorieeMan commented 3 years ago

Seems like they reopened the servers for a last chance now! https://spideroak.support/hc/en-us/articles/360057026291-Encryptr-Disconnected

The Spideroak people told me this after contact with support: "We are currently planning to re-enable the Encryptr servers temporarily for users to retrieve passwords this weekend (3/13-3/15)."

I have tried, and it works at the moment for writing this. So hurry up!

PS; This was poorly handled by SpiderOak. In my opinion you don't really do this without adding a notice within the app itself. They could have pushed an app update with a push notice and specific info about "End of Life". This is an important lesson for devs. to reach out to users via the same means the users interact with the given software. We and especially Normies using services are often focused on other things than following the devs Twitter account - and will just get angry and lose trust when things we rely on disappear out of nowhere.

Think of all those none programmers who use the app, they would never even reach a GitHub thread or know that there's a second chance on this now. Sad, that they also lost important stuff stored in Encryptr...

Greyswindire commented 3 years ago

Seems like they reopened the servers for a last chance now! https://spideroak.support/hc/en-us/articles/360057026291-Encryptr-Disconnected

The Spideroak people told me this after contact with support: "We are currently planning to re-enable the Encryptr servers temporarily for users to retrieve passwords this weekend (3/13-3/15)."

I have tried, and it works at the moment for writing this. So hurry up!

PS; This was poorly handled by SpiderOak. In my opinion you don't really do this without adding a notice within the app itself. They could have pushed an app update with a push notice and specific info about "End of Life". This is an important lesson for devs. to reach out to users via the same means the users interact with the given software. We and especially Normies using services are often focused on other things than following the devs Twitter account - and will just get angry and lose trust when things we rely on disappear out of nowhere.

Think of all those none programmers who use the app, they would never even reach a GitHub thread or know that there's a second chance on this now. Sad, that they also lost important stuff stored in Encryptr...

I'm glad they decided to add another weekend for users to migrate their information to a new platform, but I really don't understand why it was so difficult for them to contact everyone (via a program update) and then keep the servers online for an extra few weeks? I'm not familiar with the costs involved, maybe it's cost prohibitive. The whole thing could have been handled a lot better, considering the critical nature of the program.

AndJLan8404 commented 3 years ago

Well this sucks, hahah! I cannot access it any longer since I missed all of the time windows to access my passwords or download the csv file. I had no idea about either of the weekends explained above. Looks like I'm screwed.

Greyswindire commented 3 years ago

Sorry to hear it. I was lucky, but I could easily be in your exact situation right now. How did you learn the program was going offline?

dounia-hub commented 3 years ago

Hello, Is there a possibility to have another temporary access any time soon?

Greyswindire commented 3 years ago

Hello, Is there a possibility to have another temporary access any time soon?

I suspect there might be, but I have zero control over it. I'm an end user like you. Email SpiderOak and explain to them you got no prior notice that they were dropping the program. I'm sure there are still a decent amount of people out there who are in the same boat as you are, and need their passwords. So far SpiderOak have been pretty good about trying to help everyone get their information before the program goes offline forever. They've opened their servers on three different occasions since March 4th, so it wouldn't surprise me if they decided to do it one more time.

Good luck.

dounia-hub commented 3 years ago

I seriously Hope so...Thank you so much for your reply

VictorieeMan commented 3 years ago

Hello, Is there a possibility to have another temporary access any time soon?

The Best option for you and people in the future who get this problem is to send their support an email --> support@spideroak.com

This will also let them know the demand for reopening the servers each time as well.

purplecheddar commented 3 years ago

they're still turning the servers back on at Saturdays & Sundays for as long as needed, according to encryptr's twitter, so you can pull all your credentials out

Greyswindire commented 3 years ago

I seriously Hope so...Thank you so much for your reply

👍

Smart move by SpiderOak, and the right thing to do.

VictorieeMan commented 3 years ago

they're still turning the servers back on at Saturdays & Sundays for as long as needed, according to encryptr's twitter, so you can pull all your credentials out

Good news! The previous solution was lawsuit territory. At least according to Common law.