Re: Status of the Java Port?

Yes! I will definitely have to look at compiling this sucker and taking 
a look under the hood soon. I have talked to some professors and they 
are excited about this project and how far the community has taken it. I 
have not confirmed or denied the fact that we *must* do the application 
in 3-Tier format. The idea I have in my head for a 3-Tier application 
for this would be as follows:
    Presentation Layer
    Business Logic Layer (Most of the encryption goodies)
    Data Access Layer which will do the file storage and manipulation.

I expect that the current structure of the project would not need to be 
changed much since it has been written in java (assuming we are talking 
about *only* the java port right now). I would be very interested in 
implementation of a new encryption method along with documenting the 
current programming using UML (Unified Modeling Language).

Finals end for me Saturday so I would say that some time next week I 
will be able to devote some serious time researching specifics. Thanks 
for your time and interest guys!

-Dustin Eric Venegas

Glen Smith wrote:

> Dustin,
>
> Since I've been having a look at the Java port lately, I can probably 
> talk a little to this from a "new guy" perspective.
>
> The Java port is currently well structured into different projects 
> within the one CVS module:
> * PasswordSafeLib - which houses a very nice API to the PasswordSafe 
> file format. Has its own Ant build setup, Javadoc, etc.
> * PasswordSafeJ - which is a Swing app that provides the GUI for 
> interacting with the API from PasswordSafeLib
>
> For my SWT GUI, I'm using PasswordSafeLib as is, and just writing my 
> own GUI layer.
>
> For your N-Tier solution, I'd be thinking about creating a new 
> "PasswordSafeJWeb" or similar top-level directory to house your 
> Applet/Servlet/Struts/whatever code (tiers 1 & 2), and just reusing 
> the existing PasswordSafeLib to do the dirty work password related 
> storage and editing (eg. saving/loading/editing/updating safes).
>
> So, I wouldn't see the need to fork. You probably just need to create 
> a new presentation layer for the web in it's own project directory. 
> Sounds exciting!
>
> Just my $0.02,
>
> Glen.
>
>
>
> Cyrus242 wrote:
>
>> Hi,
>>
>> I'm sorry. I guess my choice of words 'failed' in conveying my 
>> meaning. I have been using Password Safe and will continue doing so. 
>> I definitely want to take a look at the java port that has been done. 
>> The only problem I fear is the format its currently in: We will have 
>> to look at doing what's known as a 3-Tier application. Should we look 
>> at taking the java port in this direction or make a project fork?
>>
>> -Dustin Eric Venegas
>>
>> Rony Shapiro wrote:
>>
>>> Hi,
>>>
>>> I don't think that PasswordSafe has "failed" by any reasonable 
>>> definition of
>>> the term. It does what it was designed to do quite well, and I am 
>>> not aware
>>> of any breaches in the security or cryptography (note that the terms 
>>> are not
>>> synonymous). But then again, I may be a bit biased :-)
>>>
>>> If you're interested in a Java port, the CVS repository has some 
>>> work that
>>> was done a while ago that might serve as the basis for a downloadable
>>> applet.
>>>
>>>     Cheers,
>>>
>>>         Rony
>>>
>>> ________________________________
>>>
>>>     From: [email protected]
>>> [mailto:[email protected]] On Behalf Of
>>> Cyrus242
>>>     Sent: Monday, May 02, 2005 12:42 AM
>>>     To: [email protected]
>>>     Subject: Re: [Passwordsafe-devel] Status of the Java Port?
>>>        
>>>
>>>     Greg Thomas wrote:
>>>         On 5/1/05, Cyrus242 <[email protected]>
>>> <mailto:[email protected]>  wrote:
>>>                      my group would be interested in talking about why
>>> this password
>>>             safe has failed and what can be done to make a
>>> better one.
>>>                               FWIW, I don't think PS has "failed". 
>>> Time has moved on, and
>>> it is
>>>         perhaps not quite as secure as it could be. That said, I
>>> consider if
>>>         safe enough. OK, it may not be good enough for state
>>> secrets, but it
>>>         will keep my online banking details out of Joe Hackers
>>> hands.
>>>                Either way, it's nothing that a couple of new encryption
>>> routines
>>>         wouldn't solve.
>>>                                     I do not think C++ is a candidate
>>> language as none of us know it. C# and
>>>             JAVA seem likely candidates as well as a possibility
>>> for PHP or another
>>>             web based language. I am personally pushing for Java
>>> or C#.
>>>                               PHP etc. are (generally) server side 
>>> languages. That's no
>>> good, unless
>>>         you can trust your server 100%, which most people can't. If
>>> you want a
>>>         WWW based solution, I think the only option would be a Java
>>> applet
>>>         that uploads/downloads the encrypted file to the server, and
>>> decrypts
>>>         it locally. You can digitally sign the applet so you know it
>>> hasn't
>>>         been tampered with.
>>>                Greg
>>>                     PHP or another simple solution would be done 
>>> only if time
>>> constraints are put in place beyond our control. A java applet did 
>>> pass by
>>> my mind as a solution. Again though, I would personally prefer to 
>>> use Java
>>> or C# to have a 'password safe' with proper security measures.
>>>
>>>
>>>
>>> -------------------------------------------------------
>>> This SF.Net email is sponsored by: NEC IT Guy Games.
>>> Get your fingers limbered up and give it your best shot. 4 great 
>>> events, 4
>>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>>> _______________________________________________
>>> Passwordsafe-devel mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
>>>
>>>  
>>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by: NEC IT Guy Games.
>> Get your fingers limbered up and give it your best shot. 4 great 
>> events, 4
>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>> _______________________________________________
>> Passwordsafe-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
> Get your fingers limbered up and give it your best shot. 4 great 
> events, 4
> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> _______________________________________________
> Passwordsafe-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
>


-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.
Get your fingers limbered up and give it your best shot. 4 great events, 4
opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20