G.PAD

20 views
Skip to first unread message

Back Buffer

unread,
Dec 20, 2007, 11:23:57 AM12/20/07
to TiddlyWiki
http://pad.tiddlyspot.com/

It's my little plugin for managing all my passwords.

Hope it's helpful someday for you too.

Best wishes,
Back Buffer

FND

unread,
Dec 21, 2007, 7:47:04 AM12/21/07
to Tiddl...@googlegroups.com
> It's my little plugin for managing all my passwords.
> Hope it's helpful someday for you too.

Thanks for sharing!
I just took a quick look, and it looks interesting - but frankly, I
don't really know what to do with it, or how to handle it.

As far as I understand it, G.PAD serves as a storage for usernames and
passwords of various web services (forums, social networks etc.).
The bookmarklet is supposed to automatically fill in the stored data.

Somehow I can't get this to work though; could you provide a
step-by-step guide?
Also, there is no download link/button in the current version, which
makes it a bit cumbersome to save G.PAD to the HDD.

One major concern: It seems that, if there are any passwords, they will
not be encrypted. Could you explain this as well?

Thanks!


-- F.

Morris Gray

unread,
Dec 21, 2007, 10:16:15 AM12/21/07
to TiddlyWiki
> Also, there is no download link/button in the current version, which
> makes it a bit cumbersome to save G.PAD to the HDD.

Here is a quick and easy way to download any TiddlySpot TW; just put
this in any tiddler using the appropriate site name.

<html><a href="http://tiddlyspot.com/?action=download&site=pad"
target="_blank">download from server</a></html>

Morris Gray
http://twhelp.tiddlyspot.com
A TiddlyWiki help file for beginners

FND

unread,
Dec 21, 2007, 10:39:06 AM12/21/07
to Tiddl...@googlegroups.com
> Here is a quick and easy way to download any TiddlySpot TW [...]

Actually, that button should be in the TspotSidebar shadow tiddler
(included in the sidebar by default), which is created by the
TspotSetupPlugin - I'm not sure it's a good idea to remove that plugin
from a Tiddlyspot-hosted TiddlyWiki...


-- F.

Back Buffer

unread,
Dec 21, 2007, 11:15:25 AM12/21/07
to TiddlyWiki
Thanks for feedback!

G.PAD does not store any passwords.
They are calculated on the fly.

The cals is based on these things:
1) the site domain, e.g. "google.com"
2) the user name, e.g. "demouser"
3) a secret word you just clicked into the G.PAD


Here comes a general use-case:

=== action for just one time ===
1) enter new domain/user data as a tiddler and save it.
title: google.com
content: @@demouser@@
2) reinstall the bookmarklet from G.PAD control center.(you may need
to close/open it to refresh.)

=== action everytime when you login the site ===
1) browse to google.com
2) activate G.PAD through bookmarklet
3) click in a secret word as you like, then click the title box.
4) you will see the user name list, click "demouser".
5) the password will be shown. If there are "password" input fields on
the page, and they are *Empty*, they will be filled automatically.


You can think the secret word as the "master password". Since G.PAD
does not compare this to any pre-stored value, neither it put any
restrict on how to use it (for example: you can use different secret
words on different sites...), you are extremely safe to use this tool.
I mean, once you let your hands off the mouse, G.PAD immediately
become an absolutely neutral tool that has no clue for any other
people to deduce your passwords...

Hope this helpful.
B.B.

Back Buffer

unread,
Dec 21, 2007, 11:56:59 AM12/21/07
to TiddlyWiki
Thanks for your tips! I've added the "download" button to sidebar.


On Dec 21, 9:16 am, Morris Gray <msg...@symbex.net.au> wrote:
> > Also, there is no download link/button in the current version, which
> > makes it a bit cumbersome to save G.PAD to the HDD.
>
> Here is a quick and easy way to download any TiddlySpot TW; just put
> this in any tiddler using the appropriate site name.
>
> <html><a href="http://tiddlyspot.com/?action=download&site=pad"
> target="_blank">download from server</a></html>
>
> Morris Grayhttp://twhelp.tiddlyspot.com

Back Buffer

unread,
Dec 21, 2007, 12:06:46 PM12/21/07
to TiddlyWiki
I did not "drop" anything. I just did not add the TspotSetupPlugin to
my page. I feel that the UploadPlugin itself has already been working
well with TiddlySpot...

Here is the steps when I create G.PAD page:

1) download a lastest verssion of empty TW from tiddlywiki.com
2) add in my G.PAD plugins and other style stuff.
3) import UploadPlugin (as well as the PasswordOptionPlugin)
4) add <<upload>> in SidebarOptions and set advanced options:
upload user: pad
password: xxxxxxxx
store url: http://pad.tiddlyspot.com/store.cgi
store file: index.html

Then it just works fine for me.

Daniel Baird

unread,
Dec 22, 2007, 8:21:58 AM12/22/07
to Tiddl...@googlegroups.com
On 12/22/07, Back Buffer <backb...@gmail.com> wrote:
>
> I did not "drop" anything. I just did not add the TspotSetupPlugin to
> my page. I feel that the UploadPlugin itself has already been working
> well with TiddlySpot.

For the record: as a Tiddlyspot Person, I'm ok with this. We do a bit
of work to make it easy to use tiddlyspot, and package that work up in
the TspotSetupPlugin, but if you really want to do without it, that's
fine with us.

I'd recommend a lot of careful backups though.

Cheers
;Daniel

--
Daniel Baird
Cop: "Do you know how fast you were going, sir?"
Heisenberg: "No, but I know exactly where I am!"

Back Buffer

unread,
Dec 22, 2007, 11:17:13 AM12/22/07
to TiddlyWiki
Sorry for not using TspotSetupPlugin. That's acturally a very handy
one and has tought me all about Tspot site settings... I recommand
everyone to stick to it.

For me, since I am used to working locally then upload when done, I
find that default plugin conflicts between multiple Tspot site local
files. For example, I have one G.PAD page for demo, and another one
for my daily use. They share same pasUploadPassword values. That's a
little annoying so I tweak the UploadPlugin a little. From that point,
it relatively a little easier to integrate the Tspot settings and make
all changes into one place.

Best regards,
B.B.



On Dec 22, 9:21 pm, "Daniel Baird" <danielba...@gmail.com> wrote:

FND

unread,
Dec 24, 2007, 8:55:34 AM12/24/07
to Tiddl...@googlegroups.com
> G.PAD does not store any passwords.
> They are calculated on the fly.

That's certainly an interesting approach - but I do have a few concerns:

#1
This means I have to sign up for each account with G.PAD - or how would
I import existing account data into G.PAD?

#2
What if I'm on another machine where my G.PAD is not available - I won't
know my password without G.PAD!?

#3
What if the respective web service changes the domain? For example,
instead of http://login.foo.bar it might be https://secure.foo.bar?

So I will probably stick to my TiddlerEncryptionPlugin-powered
TiddlyWiki for now. Nevertheless, I really like the idea of that
bookmarklet...


-- F.


* http://tinyurl.com/37ozru
(http://www.remotely-helpful.com/TiddlyWiki/TiddlerEncryptionPlugin.html)

Back Buffer

unread,
Dec 24, 2007, 10:25:37 AM12/24/07
to TiddlyWiki
> #1
> This means I have to sign up for each account with G.PAD - or how would
> I import existing account data into G.PAD?

G.PAD stores login names with each domain as a tiddler. The control
center will automatically search all tidders tagged by "GPAD_DATA" and
list them in multi-tabs according to the first character.

There is no "importing" feature. G.PAD will not store any password
means it will not remember any one from your previous tools... Sorry,
but this is one design goal... This makes G.PAD absolutely neutral
when you not use it. However, you can edit the tidder as this:
@@username::memo@@. When G.PAD shows, it will display the new
password, as well as a short "memo" to remind you anything about this
account. (for example: remind you this a/c is still managed by another
password software...)


> #2
> What if I'm on another machine where my G.PAD is not available - I won't
> know my password without G.PAD!?

That's where TiddlySpot.com kicks in and rocks.

However, since you usually will password-protect your hosted G.PAD
file, you have to remember that one.
Note: even if you make your G.PAD file public, you passwords is still
safe (it's nowhere in the file).


> #3
> What if the respective web service changes the domain? For example,
> instead ofhttp://login.foo.barit might behttps://secure.foo.bar?

First, G.PAD does not care the "protocol" part of the url.
Second, it recursively searches the domain name in all data tiddlers.
(explained below)
Third, you can use "domain" pipe to redirect the password generation.

Let's say, you have 3 tiddlers set like this:

Tiddler One:
Title:control.foobar.com
content:@@user1@@

Tiddler Two:
Title:foobar.com
content:@@user2@@

Tiddler Three:
Title:foobar.net
content:@@|foobar.com@@

When you activate G.PAD on http[s]://control.foobar.com, you will see
user1.
When you at http[s]://www(or anything other than control).foobar.com,
you will see user2.
When you at http[s]://www(or anthing).foobar.net, you will see user2
again (and it of course generates the same password as you are on
foobar.com)


Hope this words helps. ;-)

Merry X-mas!
B.B

FND

unread,
Dec 25, 2007, 5:23:34 AM12/25/07
to Tiddl...@googlegroups.com
> [snip]
> Hope this words helps.

Certainly does - thanks for the detailed explanation!


-- F.

Back Buffer

unread,
Dec 25, 2007, 3:27:43 PM12/25/07
to TiddlyWiki
Just created a web site for this tool:

http://www.gpad.org


Cheers,
B.B.

Nicolas Syssoieff

unread,
Dec 28, 2007, 8:24:27 AM12/28/07
to Tiddl...@googlegroups.com
Hi all,

I'm trying to understand exactly how this works.
I've saved the GPAD to my personal HDD, created a few entries, saved, reloaded, bookmarked the bookmarklet. Fine.

Now when I close the local TW, the bookmarklet seems to still be working on my test sites, though there's no link to the local TW in it.
So am I right to assume that in fact, the whole TW is used only to generate the list of entries (and as a consequence, the appropriate bookmarklet with all the info), and then the bookmarklet alone does the obfuscation of my "master password" (combined with the site I'm requesting) to generate this site's password, through an algorithm embedded inside it ?

If all the above is true, then why bother with a TW counterpart (if not for ease of use) and not edit this very smart bookmarklet directly with an advanced notepad editor ?
If not, then what exactly is the added value of the GPAD TW ?

Thanks for your help explaining all of this, and congratulations for the idea of this bookmarklet, I really love it.

Nicolas.

Simon Baird

unread,
Jan 18, 2008, 10:00:41 AM1/18/08
to Tiddl...@googlegroups.com
On Dec 22, 2007 1:16 AM, Morris Gray <msg...@symbex.net.au> wrote:

Here is a quick and easy way to download any TiddlySpot TW;  just put
this in any tiddler using the appropriate site name.

<html><a href=" http://tiddlyspot.com/?action=download&site=pad"
target="_blank">download from server</a></html>

That's the old way. The current and more supported way is with this url:
http://pad.tiddlyspot.com/download
 

--
simon...@gmail.com
Reply all
Reply to author
Forward
0 new messages