RE: Status of the Java Port?

 Hm,

The Java code is basically waiting there to be taken up - the person who
wrote it had to leave the project shortly after he stabilised it, so I don't
see any reason to fork the Java passwordsafe source.

For academic purposes, you might want to take a look at the paper someone
wrote awhile ago describing the code from a patterns perspective:
https://sourceforge.net/docman/?group_id=41019 If you also write a term
paper that would help understanding the code, I'd be glad to add it to the
project's documentation.

	Cheers,

		Rony

> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Cyrus242
> Sent: Wednesday, May 04, 2005 6:45 AM
> To: [email protected]
> Subject: Re: [Passwordsafe-devel] Status of the Java Port?
> 
> Yes! I will definitely have to look at compiling this sucker 
> and taking 
> a look under the hood soon. I have talked to some professors and they 
> are excited about this project and how far the community has 
> taken it. I 
> have not confirmed or denied the fact that we *must* do the 
> application 
> in 3-Tier format. The idea I have in my head for a 3-Tier application 
> for this would be as follows:
>     Presentation Layer
>     Business Logic Layer (Most of the encryption goodies)
>     Data Access Layer which will do the file storage and manipulation.
> 
> I expect that the current structure of the project would not 
> need to be 
> changed much since it has been written in java (assuming we 
> are talking 
> about *only* the java port right now). I would be very interested in 
> implementation of a new encryption method along with documenting the 
> current programming using UML (Unified Modeling Language).
> 
> Finals end for me Saturday so I would say that some time next week I 
> will be able to devote some serious time researching 
> specifics. Thanks 
> for your time and interest guys!
> 
> -Dustin Eric Venegas
> 
> Glen Smith wrote:
> 
> > Dustin,
> >
> > Since I've been having a look at the Java port lately, I 
> can probably 
> > talk a little to this from a "new guy" perspective.
> >
> > The Java port is currently well structured into different projects 
> > within the one CVS module:
> > * PasswordSafeLib - which houses a very nice API to the 
> PasswordSafe 
> > file format. Has its own Ant build setup, Javadoc, etc.
> > * PasswordSafeJ - which is a Swing app that provides the GUI for 
> > interacting with the API from PasswordSafeLib
> >
> > For my SWT GUI, I'm using PasswordSafeLib as is, and just 
> writing my 
> > own GUI layer.
> >
> > For your N-Tier solution, I'd be thinking about creating a new 
> > "PasswordSafeJWeb" or similar top-level directory to house your 
> > Applet/Servlet/Struts/whatever code (tiers 1 & 2), and just reusing 
> > the existing PasswordSafeLib to do the dirty work password related 
> > storage and editing (eg. saving/loading/editing/updating safes).
> >
> > So, I wouldn't see the need to fork. You probably just need 
> to create 
> > a new presentation layer for the web in it's own project directory. 
> > Sounds exciting!
> >
> > Just my $0.02,
> >
> > Glen.
> >
> >
> >
> > Cyrus242 wrote:
> >
> >> Hi,
> >>
> >> I'm sorry. I guess my choice of words 'failed' in conveying my 
> >> meaning. I have been using Password Safe and will continue 
> doing so. 
> >> I definitely want to take a look at the java port that has 
> been done. 
> >> The only problem I fear is the format its currently in: We 
> will have 
> >> to look at doing what's known as a 3-Tier application. 
> Should we look 
> >> at taking the java port in this direction or make a project fork?
> >>
> >> -Dustin Eric Venegas
> >>
> >> Rony Shapiro wrote:
> >>
> >>> Hi,
> >>>
> >>> I don't think that PasswordSafe has "failed" by any reasonable 
> >>> definition of
> >>> the term. It does what it was designed to do quite well, and I am 
> >>> not aware
> >>> of any breaches in the security or cryptography (note 
> that the terms 
> >>> are not
> >>> synonymous). But then again, I may be a bit biased :-)
> >>>
> >>> If you're interested in a Java port, the CVS repository has some 
> >>> work that
> >>> was done a while ago that might serve as the basis for a 
> downloadable
> >>> applet.
> >>>
> >>>     Cheers,
> >>>
> >>>         Rony
> >>>
> >>> ________________________________
> >>>
> >>>     From: [email protected]
> >>> [mailto:[email protected]] 
> On Behalf Of
> >>> Cyrus242
> >>>     Sent: Monday, May 02, 2005 12:42 AM
> >>>     To: [email protected]
> >>>     Subject: Re: [Passwordsafe-devel] Status of the Java Port?
> >>>        
> >>>
> >>>     Greg Thomas wrote:
> >>>         On 5/1/05, Cyrus242 <[email protected]>
> >>> <mailto:[email protected]>  wrote:
> >>>                      my group would be interested in 
> talking about why
> >>> this password
> >>>             safe has failed and what can be done to make a
> >>> better one.
> >>>                               FWIW, I don't think PS has 
> "failed". 
> >>> Time has moved on, and
> >>> it is
> >>>         perhaps not quite as secure as it could be. That said, I
> >>> consider if
> >>>         safe enough. OK, it may not be good enough for state
> >>> secrets, but it
> >>>         will keep my online banking details out of Joe Hackers
> >>> hands.
> >>>                Either way, it's nothing that a couple of 
> new encryption
> >>> routines
> >>>         wouldn't solve.
> >>>                                     I do not think C++ is 
> a candidate
> >>> language as none of us know it. C# and
> >>>             JAVA seem likely candidates as well as a possibility
> >>> for PHP or another
> >>>             web based language. I am personally pushing for Java
> >>> or C#.
> >>>                               PHP etc. are (generally) 
> server side 
> >>> languages. That's no
> >>> good, unless
> >>>         you can trust your server 100%, which most people 
> can't. If
> >>> you want a
> >>>         WWW based solution, I think the only option would 
> be a Java
> >>> applet
> >>>         that uploads/downloads the encrypted file to the 
> server, and
> >>> decrypts
> >>>         it locally. You can digitally sign the applet so 
> you know it
> >>> hasn't
> >>>         been tampered with.
> >>>                Greg
> >>>                     PHP or another simple solution would be done 
> >>> only if time
> >>> constraints are put in place beyond our control. A java 
> applet did 
> >>> pass by
> >>> my mind as a solution. Again though, I would personally prefer to 
> >>> use Java
> >>> or C# to have a 'password safe' with proper security measures.
> >>>
> >>>
> >>>
> >>> -------------------------------------------------------
> >>> This SF.Net email is sponsored by: NEC IT Guy Games.
> >>> Get your fingers limbered up and give it your best shot. 4 great 
> >>> events, 4
> >>> opportunities to win big! Highest score wins.NEC IT Guy 
> Games. Play to
> >>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> >>> _______________________________________________
> >>> Passwordsafe-devel mailing list
> >>> [email protected]
> >>> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
> >>>
> >>>  
> >>>
> >>
> >>
> >> -------------------------------------------------------
> >> This SF.Net email is sponsored by: NEC IT Guy Games.
> >> Get your fingers limbered up and give it your best shot. 4 great 
> >> events, 4
> >> opportunities to win big! Highest score wins.NEC IT Guy 
> Games. Play to
> >> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> >> _______________________________________________
> >> Passwordsafe-devel mailing list
> >> [email protected]
> >> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
> >
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: NEC IT Guy Games.
> > Get your fingers limbered up and give it your best shot. 4 great 
> > events, 4
> > opportunities to win big! Highest score wins.NEC IT Guy 
> Games. Play to
> > win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> > _______________________________________________
> > Passwordsafe-devel mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
> >
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
> Get your fingers limbered up and give it your best shot. 4 
> great events, 4
> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> _______________________________________________
> Passwordsafe-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
> 




-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.
Get your fingers limbered up and give it your best shot. 4 great events, 4
opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20