Yubico Forum

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sit

2012-11-03T10:08:27+01:00

does this key genius work with hotmail or gmail ?

Statistics: Posted by kyo — Sat Nov 03, 2012 10:08 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sit

2011-06-21T01:53:04+01:00

Hum someone can make a tutorial for the installation of keygenius plz?

the wiki instruction are not really explicit...

i install succefully symfony 1.4, but i got a lof of code errors when i want use sources from svn.

Statistics: Posted by Cosaque — Tue Jun 21, 2011 1:53 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2010-06-24T22:47:08+01:00

Where to file bugs/ideas?
Oh well.. here goes:

1)
For some sites, the javascript code is conflicting. It seems to put the form fields into a query because the form doesn't use a standard method of posting but relies on the onsubmit event. (I think)
Of course the login then just fails.
This even happens when I enter the OTP. The password does get replaced with the fetched password.
Example:
https://www.clipperz.com/beta/?username ... assphrase=
The extra passphrase fields are also odd.

2)
add the attribute autocomplete="off" to password fields

3)
Add more yubikeys for a single account please.
Also, make the password/username input optional since it's weak and already known from the yubikey id.

4)
Show the master password dialog before the page you try to use the yubikey on outputs an error.

4)
How about making the master password dialog optional for plaintext+OTP combination.
(just like the way yubikey-pam works too)

5)
Make the kg server less knowledgeable.

Statistics: Posted by darkfader — Thu Jun 24, 2010 10:47 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2010-01-07T22:35:26+01:00

I experience a problem using the script from kg.yubico.com, while the one from keygeni.us is working.
I red that on first use per browser session i should enter the main password, but there is no field to enter it. I suppose it should show up.

Anybody can help me? I would like to use the script from kg.yubico.com.

Statistics: Posted by Zaurak — Thu Jan 07, 2010 10:35 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-14T00:42:37+01:00

Excellent, thank you very much, works with the Chrome beta native

Statistics: Posted by neutronwrangler — Thu May 14, 2009 12:42 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-13T19:32:31+01:00

To install the Bookmarklet in Chrome, you can click and drag the Bookmarklet link to the bookmark bar of the browser.
I haven't tried Greasemetal per se, but I did try the built in support for user scripts in Chrome today. There were some problems that I have now fixed, and a new version of the script has been uploaded to kg.yubico.com. To get this working I used the latest beta version of the Chrome browser, and followed these instructions. The changes I made may also fix the problems you were having with Greasemetal. If it still does't work, I recommend using the native support.

Statistics: Posted by dain — Wed May 13, 2009 7:32 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-11T16:33:43+01:00

Thanks, the demo site is useful.

The newer script is slightly different but still does not work:

Code:

Uncaught TypeError: Cannot call method 'setAutomationId' of undefined
greasemetal:running:F:\Program Files\Greasemetal\userjs\gm_utils.user.js,F:\Users\jpsc\Documents\userjs\keygenius.user.js http://kg.yubico.com/demo
Uncaught ReferenceError: keygenius_login is not defined https://kg.yubico.com/?token=ccccccccekdelfghgejvlgeejgvnfcigdnbktltjcttk&url=http%3A%2F%2Fkg.yubico.com%2Fdemo&callback=keygenius_login[0.6393893770873547] (line 1)

I could not get the bookmarklet to work, Chrome rightclick on the link only gives "Inspect element"

Statistics: Posted by neutronwrangler — Mon May 11, 2009 4:33 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-11T15:06:49+01:00

io41 wrote:

I'm rather curious about keygeni.us (AppEngine) in comparison to kg.yubico.com. Are you using python for this? Or java? Or one of the many languages that runs on top of java? I'm guessing that the backend there is not php. If it's ruby or python, I would love to see the source code as every now and then I find time to scratch an itch or two.

Kindest Regards,
tim ^,^

The Appengine version is written i Python. I don't think I will be releasing that as I was a bit rushed when writing it and the code is rather messy. If you have any questions about it I'll be glad to answer them though!

neutronwrangler wrote:

Does anybody have this working with Chrome and greasemetal? For me it captures passwords, but I have not successfully used it to log on. What is the best way to debug?
--
John Cooper

I haven't tried this myself but I do however use the Bookmarklet version under Chrome with no problems at all. Does the Bookmarklet version work for you? Unfortunately the only computer with Windows that I have easy access to is my work desktop, and I can't spend time testing this stuff at work. Which server are you using? The newest version of the script (from kg.yubico.com) slightly modifies the password fields appearence (it adds a Yubico icon to the field), so you should be able to see if it has activated successfully or not. Does this happen when using Greasemetal? You can use http://kg.yubico.com/demo to troubleshoot a little. It will show you what was submitted.

Statistics: Posted by dain — Mon May 11, 2009 3:06 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-11T10:05:25+01:00

Does anybody have this working with Chrome and greasemetal? For me it captures passwords, but I have not successfully used it to log on. What is the best way to debug?
--
John Cooper

Statistics: Posted by neutronwrangler — Mon May 11, 2009 10:05 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-05-08T23:01:43+01:00

Statistics: Posted by io41 — Fri May 08, 2009 11:01 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-04-28T21:36:05+01:00

The backend source is now available for download!
There isn't much documentation available for now, but you can download the code and run it yourself. It is available at:
http://code.google.com/p/keygenius/
You will need to use SVN to get the code.

Please post any quertions you have about it, or any feedback you wish to give.

Statistics: Posted by dain — Tue Apr 28, 2009 9:36 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-04-16T09:06:25+01:00

Hi Hacho!

The open source backend is almost ready, http://kg.yubico.com is currently using the rewrite I'm doing, so it's fully functional. It is running on a basic LAMP stack (Linux, Apache, MySQL, PHP), using the Symfony web framework which is written in PHP. To run the KeyGenius backend yourself you will need PHP5 and a database supported by Symfony. I doubt I'll have time to get the code up before the RSA conference next week, but I expect to have it available shortly after that.

Statistics: Posted by dain — Thu Apr 16, 2009 9:06 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-04-16T05:09:27+01:00

Hi, Dain

Firstly, KeyGenius is a genius idea! Love it.

I too am awaiting eagerly for open source release of the back end. I am willing to help in documenting/cleaning the code if you don't have time. What are the requirements to install the backend? What language is the code in?

Statistics: Posted by hacho — Thu Apr 16, 2009 5:09 am

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-03-21T15:31:53+01:00

Thanks! I'll concider allowing an optional passphrase for added security. If I do implement this I think it would be used completly locally

EDIT: That's strange, it seems most of my message got cut off.
Anyway, what I wrote was that I would probably optionally encrypt and decrypt locally in the browser, requiring you to enter the extra passphrase each time you want to access the password. The pros of this is that you never submit your actual password anywhere but to the site where you are using it. The cons are that the plugin would grow a bit in complexity to allow this new functionality, and would have to include an encryption algorithm.

Statistics: Posted by dain — Sat Mar 21, 2009 3:31 pm

Re: KeyGenius - enable the YubiKey for non-YubiKey aware sites

2009-03-19T16:26:13+01:00

dain wrote:

I've made some updates to KeyGenius!

Cool changes! I'll let you know if those fixed my earlier problems. And congralutaions for your win! Like I said, you already got my vote, I'm glad you got also jurys vote

And please consider my idea of adding possibility to use passphrase to really nail it!

Statistics: Posted by iipee — Thu Mar 19, 2009 4:26 pm