password

Bug #577848 reported by bartje
26
This bug affects 5 people
Affects Status Importance Assigned to Milestone
Lifeograph
Fix Released
Critical
Unassigned
lifeograph (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

I seem not to be able to enter a password for a newly created diary. After choosing the location to save the diary, it immediately opens the diary for editing.

When saving, and trying to re-open, it asks for the password, which I could not give initially, but it can't open the diary without entering a password. In other words, I can't open anything with the application.

Please get these things straightened out. Now it is simply unusable. I don't know how others work with it.
I'm using it on Ubuntu Studio 10.04

grtz,
Bart

Tags: password
bartje (bart-deruyter)
security vulnerability: yes → no
visibility: private → public
Revision history for this message
Ahmet Öztürk (dmxe) wrote :

Which version of Lifeograph are you using? This was a known problem in 0.6.0 and should have been fixed in 0.6.1.

Revision history for this message
bartje (bart-deruyter) wrote : Re: [Bug 577848] Re: password

Hi,

OK, I use the 0.5.6 version, a way back version apparently, but this one is
offered on the launchpad site. https://launchpad.net/lifeograph . Now just
checking the site, and I just figured out there is a different site for the
0.6 series. Can I know why? It is quite confusing. Even on the 0.6 version
on the launchpad page links back to the unusable 0.5 series, when clicking
on the project link. Perhaps the version offered as download on the original
launchpad project page should be changed to the 0.6.2 version as well.

To let you know, Ubuntu ships with the 0.5.6-1 version, which was unusable
either. Perhaps they should be informed to update their repository. It was
quite frustrating to write a full length page, and then discovering you
can't open it anymore.

grtz,
Bart

http://www.bartart3d.be/

2010/5/9 dmXE <email address hidden>

> Which version of Lifeograph are you using? This was a known problem in
> 0.6.0 and should have been fixed in 0.6.1.
>
> --
> password
> https://bugs.launchpad.net/bugs/577848
> You received this bug notification because you are a direct subscriber
> of the bug.
>

Ahmet Öztürk (dmxe)
Changed in lifeograph:
status: New → Fix Released
importance: Undecided → Critical
Revision history for this message
Ahmet Öztürk (dmxe) wrote :

Hi,

You are right. It is not quite obvious on the launchpad site that the latest version is 0.6.2. There are separate branches for 0.5.x and 0.6.x because one of them is for development while the other one is for bug fixes only. I prefer to keep the trunk branch unstable, however, for some reason launchpad does not show releases in other branches in the main page as the latest release. Even when they have bigger version numbers than the latest release from the trunk.

I have marked this bug as also affecting Ubuntu. I hope someone will update the repositories with latest stable version. In its currently offered form, it is really unusable.

Ahmet Öztürk (dmxe)
Changed in lifeograph (Ubuntu):
status: New → Confirmed
Revision history for this message
Ner Ru (nerru) wrote :

Is there any way to recover the "false-protected" pages?
I just tried the app and it suites my purposes, so I made several entries by now and just found out there was THIS bug.

Revision history for this message
Ahmet Öztürk (dmxe) wrote :

I have just found out that the files that are affected by this bug can be opened with any one-character-long password. e.g. 1
Could you please try it and inform us about whether this method works for you?

Revision history for this message
Ner Ru (nerru) wrote :

Funny thing! Can't open my journal with that method in none of the existing versions. But I created a new test journal with version 0.5.6 (as is in Ubuntu 10.04) and the method worked for 1-2 log-ins. After that it simply refuses :P

Revision history for this message
Ner Ru (nerru) wrote :

Well, tested further!
After creating another one I tried the 2 test-journals several times and somehow this got me mine back, too. I tried an one-character-long password on that and this time it did it!
Thanks a lot, you really saved my day!

Revision history for this message
Just Asking For A CD (java-artisan) wrote :

The one-character password trick didn't work for me. But if I set immediately a password I can open the diary with that password.

I'm using the Lifeograph 0.5.6 version, shipped with Kubuntu 10.04.

Revision history for this message
BryanFRitt (bryanfritt) wrote :

I can get Lifeograph diaries to open with up to any three password characters, and when it goes back into being 'locked' I can open it with the same or different set of up to three characters. If I ever try a password of more than 3 characters Lifeograph won't 'unlock' again, no mater what password I put in, until Lifeograph gets restarted.
Lifeograph 0.6.3-1~ppa1 (lucid)
on
KUbutnu 10.04.1 64bit
p.s. I noticed that this says it's not a security vulnerability, but if people think their diary is secured with security of having a password, and it's not, that's a security issue. Not that I mind not really having a password, but others might. If it doesn't really have password implemented, it should not look like it has passwords, or at least say it doesn't. (some people might like the added security of it looking like it has passwords.)
---
p.p.s. The same dairy shouldn't be able to be opened in two or Lifeograph windows at the same time. (editing in both, and then saving issues, last one closed overwrites first one closed)... oh, and how about adding the ability to underline text.

Revision history for this message
Ahmet Öztürk (dmxe) wrote :

@BryanFRitt
Could you please explain your situation more clearly. Did you set any passwords for the diaries that you can open with any password?
Also did you create these diaries with Lifeograph 0.6.3? Or you created them with an earlier version and tried to open them with 0.6.3?

The points you mention in the pps belong to another bug report. Actually two other. Feel free to create separate reports.

Revision history for this message
BryanFRitt (bryanfritt) wrote :

I first installed 0.5.6-1 (lucid) and later upgraded to 0.6.3-1~ppa1 (lucid). I guess I might have started those in the older version. Don't know for sure since I was still playing around with trying it out, when I upgraded.

Since you suggested it, I created a new diary, this diary didn't start off with a password. I clicked on 'tools', and 'Change Password...' added a password, and now for that diary it has a real password... I just can't get rid of the diary having password, or change the diary to having password less than four characters now. (like for those who only want mild password security*)

*I find it strange that for some software, you don't have to have a password, but if you have a password the password has to be a complex password. Why force extremes? I could see giving a warning the password isn't strong; but to force passwords to complex passwords, if having a password is optional or not needed?

Revision history for this message
Ahmet Öztürk (dmxe) wrote :

@BryanFRitt
Your case fits to the known pattern of this bug. Please use v0.6.3 to be safe from it.

And please refrain from posting about unrelated ideas and discussion topics in a bug thread dedicated to a specific problem.

Revision history for this message
Ahmet Öztürk (dmxe) wrote :

I have created a section in Lifeograph wiki about this bug that also explains how to recover affected diaries:
http://lifeograph.wikidot.com/faq

Changed in lifeograph (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.