Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 31 Jul 2012 11:45:50 -0500
From: Jeffrey Goldberg <>
Subject: 1Password blog post about Dhiru's new/forthcoming 1Password module


I work for AgileBits, the makers of 1Password, a password management system. As those following jumbo and magnum-jumbo will know, over the past month or so patches have been released or are in development for working with password managements. Last week, Dhiru released something for 1Password.

I just published a blog post for 1Password users about the new/forthcoming developments in JtR, once again exhorting them to use strong master passwords. It is here

If you see any egregious errors, please let me know.

And congratulations. I'm pleased that it was the JtR community that got here first. I have a lot of respect for Elcomsoft, and I really thought that they would be the first to publicly release a tool for 1Password cracking/recovery. But I'm glad it was you folk.

Of course, I have no idea of if there have been private tools to do the same job. There was a bit of Mac malware that, among other things, sent 1Password data files back to the malware authors; so it's likely that they had some plans for that data.

On a related note, has anyone developed a rule set for going after diceware generated passwords?



Jeffrey Goldberg
Chief Defender Against the Dark Arts @ AgileBits

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.