Comments | ljsec: Invalid password error

branchandroot in ljsec

Invalid password error

Oct 27, 2011 14:43

Since LJ's last update, I get an error when I try to use lj-sec. It opens fine, and tells me it's obtaining a synch list, and then I get an error that says "invalid password". The password is correct, I checked it twice, but I know this last update changed some of the remote log-in paths. I thought that was probably the issue. Will there be an ( Read more... )

Comments 7

soundwave106 October 28 2011, 15:19:04 UTC

Argh... it looks like update 86 broke some elements of the flat API as well as some cookie methods. (http://lj-dev.livejournal.com/844401.html#comments). I am doing fine right until the getevents call. I made a post to LJ-Dev to see what can be done (whether its my end, or whether they fix their API). Seems like a lot of other applications (eg Semagic) are failing in the exact same way.

soundwave106 October 28 2011, 16:04:21 UTC

OK. I have a fix... but it uses a less secure (deprecated) method for passing in passwords, on one of the API calls. It is not the very insecure plaintext method thankfully (it's an MD5 hashed passwords) but, still, using a method marked "deprecated" makes me nervous.

It "will work" but I think I'm going to hold off releasing this as an official release to see if Livejournal can fix their official API call.

In the mean time, I will put out a temporary patch. Please download the following file:

http://mp3vcr.com/ljsec/binary/LJ-Sec.exe

Replace the LJ-Sec.exe in your installation directory (eg C:\Program Files\LJ-SecInstall\LJ-Sec.exe) and you should be able to synchronize again.

I will decide whether or not to put out this as the official release based on LJ's response (or lack thereof) to this bug.

branchandroot October 28 2011, 16:19:52 UTC

Thank you so much!

colorwhirl October 29 2011, 05:02:47 UTC

Worked like a treat. Thank you so much for the update.

Thread 6

setra November 2 2011, 04:38:46 UTC

Thank you so much for the quick fix, it worked for me! (My LJ password is different from any of my really secure ones, so I'm not worried.) If others are still having issues, they might try replacing the exe with the patched one again... my computer looked all right but didn't actually update the file the first time.