search

pwdhash / pwdhash-webextension

PwdHash webextension for firefox
https://addons.mozilla.org/de/firefox/addon/pwdhash
Other
13 stars 11 forks source link

PwdHash abandoned ... #16

Open GWuk opened 5 years ago

GWuk commented 5 years ago

I fear this project has been abandoned :cry:

I tried to contact the author Philipp Nebert, but no reply. Seems he even deleted his github account (just have a look at the commits and merged pull requests, user is now named "ghost").

So I have created an alternative version: https://github.com/GWuk/PwdHash2 / https://addons.mozilla.org/en-US/firefox/addon/pwdhash2/

Besides of fixing #10, #12, #13, #14, PwdHash2 is also a little bit enhanced:

  1. Highlight password field, if active
  2. Option to change the hash algorithm from HMAC-MD5 to PBKDF2-SHA256.
  3. Added the option to store a user-specified salt and iteration count.
  4. Added the option to use legacy (Stanford PwdHash) mode by Shift-F2 or in the options

On a sidenote: I'm also the author of the pull request for migrating this extension to WebExtension two years ago

GWuk commented 5 years ago

@collinjackson : in case you still maintain PwdHash, could you fork this repo here, merge the pull request(s) provided and publish https://addons.mozilla.org/en-US/firefox/addon/pwdhash/ to fix the severe issues starting with Firefox 66.0.2 ? If you're not willing to continue work on the add-on I'd volunteer to do so.

collinjackson commented 5 years ago

I think I would prefer to unpublish the extension since I don’t want to be on the hook for updating it in the future. It’s open source research software and you are welcome to publish and maintain your own version.

GWuk commented 5 years ago

If you like you could remove all references to yourself from mozilla's add-on page and add me as new owner, then removing yourself. That would keep the original add-on alive. In case you're interested, let me know.

EricDuminil commented 5 years ago

@GWuk : Excellent work with PwdHash2, thanks!

KingDuckZ commented 5 years ago

Thanks, great stuff! I came here to report the 'q' problem and the wrong password in recent firefox and then I found the project's been forked. This is totally not clear without coming to github, and I've just been waiting for a plugin update forever. Please remove the broken plugin or update it! Leaving a buggy version will just confuse users and adds no value to this project.