PwdHash abandoned ...

[GWuk]

I fear this project has been abandoned 😢

I tried to contact the author Philipp Nebert, but no reply. Seems he even deleted his github account (just have a look at the commits and merged pull requests, user is now named "ghost").

So I have created an alternative version: https://github.com/GWuk/PwdHash2 / https://addons.mozilla.org/en-US/firefox/addon/pwdhash2/

Besides of fixing #10, #12, #13, #14, PwdHash2 is also a little bit enhanced:

1. Highlight password field, if active
2. Option to change the hash algorithm from HMAC-MD5 to PBKDF2-SHA256.
3. Added the option to store a user-specified salt and iteration count.
4. Added the option to use legacy (Stanford PwdHash) mode by Shift-F2 or in the options

On a sidenote: I'm also the author of the pull request for migrating this extension to WebExtension two years ago

[GWuk]

@collinjackson : in case you still maintain PwdHash, could you fork this repo here, merge the pull request(s) provided and publish https://addons.mozilla.org/en-US/firefox/addon/pwdhash/ to fix the severe issues starting with Firefox 66.0.2 ?
If you're not willing to continue work on the add-on I'd volunteer to do so.

[collinjackson]

I think I would prefer to unpublish the extension since I don’t want to be on the hook for updating it in the future. It’s open source research software and you are welcome to publish and maintain your own version.

[GWuk]

If you like you could remove all references to yourself from mozilla's add-on page and add me as new owner, then removing yourself. That would keep the original add-on alive.
In case you're interested, let me know.

[EricDuminil]

@GWuk : Excellent work with PwdHash2, thanks!

[KingDuckZ]

Thanks, great stuff! I came here to report the 'q' problem and the wrong password in recent firefox and then I found the project's been forked. This is totally not clear without coming to github, and I've just been waiting for a plugin update forever.
Please remove the broken plugin or update it! Leaving a buggy version will just confuse users and adds no value to this project.