XMPP_Profanity_and_pass

!Profanity logo [2]

---

I been using Profanity for all my secure XMPP conversations, is like weechat [3]/Irssi client [4] for Jabber/XMPP [5].

I think is a great hacker tool to add to your GNU/Linux-fu magic since you can use it on so many

non-intended ways but that is not the aim of this short how to.

OK so let's go.

Embedded Image: http://www.profanity.im/images/prof-1.png

-----

So what I am going to show you is how to secure your password so is not on plain text, and if you are using a tiling window manager like Sway [8] with Wayland [9] etc where we have no password graphical key chains.

SETTING UP PASS

===============

If you have not yet imported or create your key pair(private and public keys) do so now

if you are moving your keys make sure you import them. If you already been using this ignore this

part.

gpg --import pgp-priv
gpg --import pgp-public

Now list your public keys and you will *need to get the id of your personal key* to create

the Pass encrypted database to store your passwords.

gpg -k

An example will be the email associated with the key like:

So if you never have initialized a Pass db before, run to create it:

pass init rek2@hispagatos.org

Now *we have to trust the key* to be able to use it

so do this with your key id, again ignore this if you have your keys already trusted.

gpg --edit-key rek2@hispagatos.org

Once inside type:

And that's it now is trusted.

Next we going to type your credentials, name or whatever you want to name this,

This below will prompt you for the password to be stored 2 times.. Do so :)

pass insert profanity/rek2

Good! Now check the db with

pass profanity/rek2

You should see your new entry :)

RTFM for how to use pass is very useful for many other applications.

Configure profanity

==================

You should read the documentation to setup your username/password and xmpp/jabber server

you going to connect to.

like:

/account add rek2
/account set rek2 jid rek2@xmpp.hispagatos.org
/account set rek2 server xmpp.hispagatos.org
/account set rek2 port 5111

OK this will set you up... But you STILL need to setup the password... For this

we have a cool option:

set  eval_password  : Shell command evaluated to retrieve password for the account. Can be used to retrieve password from keyring.

So this will be like:

/account set rek2 eval_password "pass profanity/rek2"

Now every time you login it will grab the password from the encrypted database of Pass

if is the first time you start your GnuPG session it will ask you for your PGP key password

to open up the key chain, such will use this key chain to authenticate with Pass and give profanity

the requested information, in this case the password...

OK that's it.. No more passwords on configuration files PLEASE.

ReK2 [10]

Video Show [11]

References

[2] Profanity logo (https://salsa.debian.org/uploads/-/system/project/avatar/12843/profanity.png)

[3] weechat (https://weechat.org/)

[4] Irssi client (http://www.irssi.org/)

[5] Jabber/XMPP (https://xmpp.org/)

[6] here (http://www.profanity.im/userguide.html)

[7] here (https://www.passwordstore.org/)

[8] Sway (https://swaywm.org/)

[9] Wayland (https://wayland.freedesktop.org/)

[10] ReK2 (https://keybase.io/rek2)

[11] Video Show (https://video.hispagatos.org/)

Related articles

HackTheBox and Hispagatos: <no value>

Novedades de hispagatos: <no value>

Kevin_mitnick: <no value>

---

← Newer: Arch

→ Older: 35c5_Chaos_Communication_Congress

 █████ █████ █████ █████ █████ █████ █████ █████
░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░

Hispagatos is an Anarcho Hacker collective[1] that resolves around the Hacker ethic[2] of Steven levy and Libertarian Socialism ideas.

We work hard to preserve hacker culture, decentralization,security and privacy in cyberspace and also motivate towards an horizontal and non hierarchical techno-anarcho-communist society (TACS) where technology is made by people for the people not by corporate masters to control people. a(A)a

1: Anarcho Hacker collective

2: Hacker Ethic

3: Libertarian Socialism

[donate using LiberaPay](https://liberapay.com/Hispagatos/donate)