Stored credentials for a site but doesn't appear to be actually stored, LOGIN menu acts strange & MP reset about mooltipass HOT 14 CLOSED

Hey there!

thanks for the detailed info!
the firmware version should be displayed in the app, under the log tab when you first launch it.
Are you using linux or windows? Did you approve website adding only or website + login + password?

Mathieu

from mooltipass.

Thanks for the reminder on firmware version!

Firmware: RC3 (I was expecting a decimaled number and didn't recognize this as firmware version, duh)
OS: Windows 7 64 bit

When I was approving adding the credential I took no special notice of which confirmations were there at the time (I wasn't in 'troubleshooting' mode yet as nothing had gone wrong.)

The website adding had a confirmation, there may not have been any others (login, password) but I am not sure.

I'll try removing the site using memory management mode and try reproducing from scratch.

from mooltipass.

Ah, no go. Memory Management mode in the app doesn't display a full list of credentials - and battle.net isn't one of the ones listed.

from mooltipass.

Perfect !
If you haven't added any credential for this website the going back to menu
behaviour is normal.
Perhaps I'll add some information message...
On Apr 22, 2015 6:36 PM, "2CNK" [email protected] wrote:

Thanks for the reminder on firmware version!

Firmware: RC3 (I was expecting a decimaled number and didn't recognize
this as firmware version, duh)
OS: Windows 7 64 bit

When I was approving adding the credential I took no special notice of
which confirmations were there at the time (I wasn't in 'troubleshooting'
mode yet as nothing had gone wrong.)

The website adding had a confirmation, there may not have been any others
(login, password) but I am not sure.

I'll try removing the site using memory management mode and try
reproducing from scratch.

—
Reply to this email directly or view it on GitHub
#155 (comment).

from mooltipass.

Is your mooltipass correctly behaving except that?
Do you have access to a Linux machine?
On Apr 22, 2015 6:37 PM, "2CNK" [email protected] wrote:

Ah, no go. Memory Management mode in the app doesn't display a full list
of credentials - and battle.net isn't one of the ones listed.

—
Reply to this email directly or view it on GitHub
#155 (comment).

from mooltipass.

The behaviour makes sense if only the site but no actual credentials exist. The MP is acting normally otherwise.

The unexpected parts were:

• Selecting the site again from the LOGIN menu actually triggered the wrong credential instead the second time around if you tried again.
• Repeating this process reset and locked the MP

Sadly I have no Linux machine handy but I could fire up a Raspberry Pi if there is something specific to try.

from mooltipass.

Well, in an attempt to investigate a bit more I changed my MP's state. I tried a login again with an expired login page just like before, but I did not delete the site credential first. I thought maybe I could observe the site and/or credentials saving part better. But the app and MP worked normally this time (possibly because the site was already in the MP?) and it stored login and password A-OK.

I could try a new smartcard (I have a spare) instead if I need to re-do this (i.e. use the expired login form to see if everything repeats) if there is value in trying that.

from mooltipass.

A new smartcard won't change anything.
Can you see the full list of your credentials in the app now?
Are you still getting the unexpected behaviour?

from mooltipass.

I had thought a new smartcard with a new pin, etc as though I were a new user might allow me to re-do the process from scratch.

Since I was able to add both login and password to what was probably the site-only credential, I am now getting normal behaviour. I also do see all the credentials in memory management mode.

I deleted the credential from the MP using memory management mode and will see if I can re-create. If not, then all is well and I'll close the issue. :D

from mooltipass.

Oh trying to replicate the bug with a new user would be actually quite awesome!

from mooltipass.

I used a new smartcard and new user, I can confirm that the MP only confirmed adding the site (it did not ask confirmation to add a login or password) when I used a sessoin expired login page for battle.net.

I was also able to replicate the issue originally posted, but not the MP reboot. That is to say, after adding a few more credentials into my MP the following will occur when selecting the site with no credentials from the LOGIN function:

• Touch LOGIN on MP
• Select "battle.net" (top left quadrant on my MP)

One of two things will happen:

• Exit back to home screen (normal)
• MP asks "Send login for ebay,ca?" (a different site, top-right quadrant)

However I think this issue can be closed for the following reasons:

1. I have a considerably harder time (maybe 1/10) triggering the "wrong" site when using LOGIN function - so much that I feel this is probably a stray capacitance issue where the touch pad simply gets triggered incorrectly. Possibly related to multiple re-triggerings. I am not being sloppy with my touches, but it could be happening. The original issue consistently had credentials for a site on an entirely different "page" showing up instead, but I can't replicate that now.
2. I have been unable to cause the MP hardware to crash back to the splash screen and lock as a result of selecting the 'empty' site with no credentials when using LOGIN. This happened on the original issue report but I have not been able to replicate it since.

If you're in agreement then I think this can be closed :)

from mooltipass.

Hey There,

Can you update to RC4? It should provide us with more debug info... and
hopefully resolve the bug once and for all :)

Cheers,
Mathieu

On Thu, Apr 23, 2015 at 12:05 AM, 2CNK [email protected] wrote:

I used a new smartcard and new user, I can confirm that the MP only
confirmed adding the site (it did not ask confirmation to add a login or
password) when I used a sessoin expired login page for battle.net.

I was also able to replicate the issue originally posted, but not the MP
reboot. That is to say, after adding a few more credentials into my MP the
following will occur when selecting the site with no credentials from the
LOGIN function:

• Touch LOGIN on MP
• Select "battle.net" (top left quadrant on my MP)

One of two things will happen:

• Exit back to home screen (normal)
• MP asks "Send login for ebay,ca?" (a different site)

However I think this issue can be closed for the following reasons:

I have a considerably harder time triggering the "wrong" site when
using LOGIN function - so much that I feel this is probably a stray
capacitance issue where the touch pad simply gets triggered incorrectly.
Possibly related to multiple re-triggerings. The original issue
consistently had credentials for a site on an entirely different "page"
showing up instead, but I can't replicate that now.
2.

I have been unable to cause the MP hardware to crash back to the
splash screen and lock as a result of selecting the 'empty' site with no
credentials when using LOGIN. This happened on the original issue report
but I have not been able to replicate it since.

If you're in agreement then I think this can be closed :)

—
Reply to this email directly or view it on GitHub
#155 (comment).

from mooltipass.

Updated to RC4 and tried to replicate issue.

Adding the site-only credential happens as usual when using the session expired login form on the web page, but it's handled perfectly well in attempts to use the MP's LOGIN now. I have normal behaviour. All is well there!

One thing I noticed:
Memory Management doesn't list the 'empty' site only credential in the list though so as a workaround to get rid of it it needs to be populated first with a login, then it can be removed using memory management.

I think Memory Management not showing a site-only entry without login credentials attached to it was why I thought management mode wasn't showing everything.

from mooltipass.

Actually I think the mem management mode is deleting that credential IIRC.

On Thu, Apr 23, 2015 at 12:54 AM, 2CNK [email protected] wrote:

Updated to RC4 and tried to replicate issue.

Adding the site-only credential happens as usual when using the session
expired login form on the web page, but it's handled perfectly well in
attempts to use the MP's LOGIN now. I have normal behaviour. All is well
there!

One thing I noticed:
Memory Management doesn't list the 'empty' site only credential in the
list though so as a workaround to get rid of it it needs to be populated
first with a login, then it can be removed using memory management.

I think Memory Management not showing a site-only entry without login
credentials attached to it was why I thought management mode wasn't showing
everything.

—
Reply to this email directly or view it on GitHub
#155 (comment).

from mooltipass.