!Profanity logo [2]
---
I been using Profanity for all my secure XMPP conversations, is like weechat [3]/Irssi client [4] for Jabber/XMPP [5].
I think is a great hacker tool to add to your GNU/Linux-fu magic since you can use it on so many
non-intended ways but that is not the aim of this short how to.
OK so let's go.
Embedded Image: http://www.profanity.im/images/prof-1.png
-----
So what I am going to show you is how to secure your password so is not on plain text, and if you are using a tiling window manager like Sway [8] with Wayland [9] etc where we have no password graphical key chains.
SETTING UP PASS
===============
If you have not yet imported or create your key pair(private and public keys) do so now
if you are moving your keys make sure you import them. If you already been using this ignore this
part.
gpg --import pgp-priv gpg --import pgp-public
Now list your public keys and you will *need to get the id of your personal key* to create
the Pass encrypted database to store your passwords.
gpg -k
An example will be the email associated with the key like:
So if you never have initialized a Pass db before, run to create it:
pass init rek2@hispagatos.org
Now *we have to trust the key* to be able to use it
so do this with your key id, again ignore this if you have your keys already trusted.
gpg --edit-key rek2@hispagatos.org
Once inside type:
And that's it now is trusted.
Next we going to type your credentials, name or whatever you want to name this,
This below will prompt you for the password to be stored 2 times.. Do so :)
pass insert profanity/rek2
Good! Now check the db with
pass profanity/rek2
You should see your new entry :)
RTFM for how to use pass is very useful for many other applications.
Configure profanity
==================
You should read the documentation to setup your username/password and xmpp/jabber server
you going to connect to.
like:
/account add rek2 /account set rek2 jid rek2@xmpp.hispagatos.org /account set rek2 server xmpp.hispagatos.org /account set rek2 port 5111
OK this will set you up... But you STILL need to setup the password... For this
we have a cool option:
set eval_password : Shell command evaluated to retrieve password for the account. Can be used to retrieve password from keyring.
So this will be like:
/account set rek2 eval_password "pass profanity/rek2"
Now every time you login it will grab the password from the encrypted database of Pass
if is the first time you start your GnuPG session it will ask you for your PGP key password
to open up the key chain, such will use this key chain to authenticate with Pass and give profanity
the requested information, in this case the password...
OK that's it.. No more passwords on configuration files PLEASE.
ReK2 [10]
Video Show [11]
[2] Profanity logo (https://salsa.debian.org/uploads/-/system/project/avatar/12843/profanity.png)
[3] weechat (https://weechat.org/)
[4] Irssi client (http://www.irssi.org/)
[5] Jabber/XMPP (https://xmpp.org/)
[6] here (http://www.profanity.im/userguide.html)
[7] here (https://www.passwordstore.org/)
[8] Sway (https://swaywm.org/)
[9] Wayland (https://wayland.freedesktop.org/)
[10] ReK2 (https://keybase.io/rek2)
[11] Video Show (https://video.hispagatos.org/)
HackTheBox and Hispagatos: <no value>
Novedades de hispagatos: <no value>
---
→ Older: 35c5_Chaos_Communication_Congress
█████ █████ █████ █████ █████ █████ █████ █████ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░
Hispagatos is an Anarcho Hacker collective[1] that resolves around the Hacker ethic[2] of Steven levy and Libertarian Socialism ideas.
We work hard to preserve hacker culture, decentralization,security and privacy in cyberspace and also motivate towards an horizontal and non hierarchical techno-anarcho-communist society (TACS) where technology is made by people for the people not by corporate masters to control people. a(A)a
[donate using LiberaPay](https://liberapay.com/Hispagatos/donate)