Re: Software security device lost password

Rajnish Bhaskar wrote:

>>>I wanted to test the new software security device (multizilla
>>>1.801d (?)) and I forgot the "master password for the Software
>>>Security Device" how can i reset it please ?
>>>      
>>>
>>Please help me... can i do something else than going on clicking
>>cancel until secure page displays or uninstall wildly multizilla
>>and reinstall it ? 
>>    
>>
>
>Make a backup of your profile in case things go horribly wrong, 
>and delete the XXXXXXXX.s and the XXXXXXXX.w (where XXXXXXXX is a 
>string of random characters) files, which hold the stored 
>passwords and the stored form data. 
>
How could it help in any way ? My passwords are well stored in XXXXXX.s 
in base 64 encoding, anybody knowing how to transcode that can see them 
as far as they access my machine and know my UNIX password :) but the 
password that Software security device asked for initializing itself is 
not there in any way. Do this new Multizilla feature do that at all ? 
I'd bet the password is stored somewhere else in a non symmetric code 
basis as md5 or so. Almost nothing can be done but a dictionary attack 
to guess it, but as i have write access to this particular file i can 
reset it as far as i know how HJ (or you) coded that or (it should be 
time to do that) i check the code. It'd be more easy for me to have a 
clue to where i should dig as far as i am not, all shame drunk  
(absolutely horrible word to word translation of a French expression), a 
coder.

> This will delete all your 
>stored passwords as well as (I hope!) the master password,
>
For what reason it'd be there ? This would mess up stored password.. I 
did not ask it to be STORED - and if it was I'd know how to retrieve it :-/
Well now, when I access a https page I am asked this Software security 
device password i have lost I cancel (one or several time depending on 
visited page organization) and i do access the page but i have not the 
benefit of the (so-so) anti fishing feature.
Another question (the answer would help me retrieving the password) when 
you don't have lose it and give it right can it be asked again before 
the page loads ? If so I may have typed the right password and have been 
wronged because it was asked again.
A last but not least question : the password i don't remember does 
contain a non ascii character would it mess all up and  even if i 
remember it there will be still a problem ?