Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

If password is a 88 byte base64 string could auth with mousebreaker instead of regular #53

Open
alexyorke opened this issue Dec 21, 2014 · 3 comments

Comments

@alexyorke
Copy link
Owner

To resolve this either:

  • Remove mousebreaker authentication entirely
  • See if there is a hidden pattern in the mousebreaker base64 string
  • Authenticate with regular if mousebreaker authentication fails
  • Lookup the user id (somehow) and then use that to authenticate with a particular service

This bug was reported by @Yonom .

@Yonom
Copy link
Collaborator

Yonom commented Dec 21, 2014

I'd vote for "Remove mousebreaker authentication entirely"! :)

@alexyorke
Copy link
Owner Author

I'll remove it in v1.0! Edit: an option could be added (like in #52) to optionally add Mousebreaker authentication (for the people who still need to use it). However, this option is only necessary if there are enough people who use that type.

@alexyorke alexyorke added this to the 1.0 milestone Dec 22, 2014
alexyorke pushed a commit that referenced this issue Nov 19, 2015
@alexyorke
Copy link
Owner Author

I didn't check the syntax on commit 3a2536c but it should fix the issue where a base64 password is causing auth errors when not using mousebreaker. If this fix works I'd like to keep mousebreaker around because there would be no collisions.

alexyorke pushed a commit that referenced this issue Nov 24, 2015
alexyorke pushed a commit that referenced this issue Nov 24, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants