How to search in external apps like Yojimbo?

Sharing and discussing custom search templates for LaunchBar
ministry
Posts: 1
Joined: Fri Jun 08, 2007 11:25 am

How to search in external apps like Yojimbo?

Post by ministry » Fri Jun 08, 2007 11:30 am

Hi,

I use LaunchBar also to search for files, etc on my disk but I can't search in metadata of other applications like Yojimbo. Especially this app I would like to search in. I can do it with Spotlight but I prefer LaunchBar.

Does someone knows how to do this?

Thanks!
Ministry

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Post by beerich » Fri Jul 06, 2007 8:52 pm

Yojimbo is driven by a simple sql database called SQLite. There's no way of reaching into apps like that because their tables are encrypted.

egrieco
Rank 1
Rank 1
Posts: 27
Joined: Sun Jul 22, 2007 5:29 pm
Location: Arizona

Post by egrieco » Sun Jul 22, 2007 5:49 pm

beerich wrote:Yojimbo is driven by a simple sql database called SQLite. There's no way of reaching into apps like that because their tables are encrypted.


That doesn't sound quite right.

Yojimbo makes use of Apple's Core Data API ( http://developer.apple.com/business/mac ... jimbo.html ). Individual items can be encrypted within Yojimbo but the data store on disk is not encrypted. You do, however, need the schema for that app to be able to read its data store.

More info about Core Data:
http://developer.apple.com/macosx/coredata.html
http://en.wikipedia.org/wiki/Core_Data

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Post by beerich » Mon Jul 23, 2007 1:31 am

The encryption is before the file level. If you have a schema, that is one thing, but all you see if encrypted text inside SQLite.

joshuakaufman
Posts: 15
Joined: Sun Jun 22, 2008 5:03 am

Post by joshuakaufman » Sun Jun 22, 2008 5:06 am

I've been wondering this forever as well. And I don't buy that there's no way of reaching into Yojimbo; Quicksilver somehow managed to do it, so Launchbar should be able to do it as well, right?

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Perhaps

Post by beerich » Sun Jun 22, 2008 12:46 pm

Perhaps, if LB has all the necessary security information, schema, SQL structure, to get into the database as a normal client. SQLite has a remedial security layer, so it would have to adopt Yojimbo's account and behave like Yojimbo.

ludwigschubert
Rank 4
Rank 4
Posts: 285
Joined: Fri Jun 29, 2007 5:54 pm
Location: Germany, Bavaria

Post by ludwigschubert » Sun Jun 22, 2008 1:02 pm

I've sent an extensive Feature Request to Objective Development about this.
I can get pretty close with the tools that come with LaunchBar, but ultimately we need Objective Development's assistance on this.
I get all the Yojimbo entries in my index, but they don't display the correct name; we can only leave that to Objective Development.

I'll write here again when I get an answer.
Meanwhile we could think about exiting ways to integrate Yojimbo; the better ideas we can present, the more likely it is for Objective Development to spent their valuable development time on such a feature.

We should also consider moving this discussion over to the main forum, as this no longer deals with "LaunchBar Search Templates".

regards,
Ludwig

EDIT: To explain a little: Objective Development does not need to read Yojimbos SQL Database, as Yojimbo exports third-party-readable copies of everything. Even Spotlight uses those. You can find them at ~/Library/Caches/Metadata/com.barebones.yojimbo .

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Yoj

Post by beerich » Sun Jun 22, 2008 1:24 pm

OK, but that would be a security risk on the Yojimbo side, as encrypted records are encrypted for a reason. The quick ability to just export, also means it's an export, and that LB would only see the export. As with all databases, data decays over time, and you'd have to export relevant records before LB could scan them.

The optimal thing would have Yojimbo provide a gateway for LB to see into records, including encrypted ones. This would provide not only a live database (scanning sensitive to file mod dates), but also get around encryption which only Yojimbo would house the key.

ludwigschubert
Rank 4
Rank 4
Posts: 285
Joined: Fri Jun 29, 2007 5:54 pm
Location: Germany, Bavaria

Re: Yojimbo

Post by ludwigschubert » Sun Jun 22, 2008 2:09 pm

beerich wrote:OK, but that would be a security risk on the Yojimbo side, as encrypted records are encrypted for a reason. The quick ability to just export, also means it's an export, and that LB would only see the export. As with all databases, data decays over time, and you'd have to export relevant records before LB could scan them.

You don't have to do it. Yojimbo does it automatically, so Spotlight can index Yojimbo's database. It's a feature of yojimbo. It's not a "security risk" as these "exports" are only aliases into Yojimbo. Maybe I should have chosen my words more careful.
beerich wrote:The optimal thing would have Yojimbo provide a gateway for LB to see into records, including encrypted ones. This would provide not only a live database (scanning sensitive to file mod dates), but also get around encryption which only Yojimbo would house the key.

That's exactly what it does. Only, as of now, LaunchBar doesn't read it the right way, so we can't see the names of the items.

Please go and have a look at ~/Library/Caches/Metadata/com.barebones.yojimbo as I suggested. You'll understand then.

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Question

Post by beerich » Sun Jun 22, 2008 6:32 pm

No that's not exactly what it does. I just tested mine. My encrypted entries are just that, and remain in the database. That is the reason WHY they are encrypted. Do you not understand encryption?

Why would Yojimbo export encrypted records into plain view? That doesn't make sense at all. Encryption is for keeping items hidden behind security. Automatically exporting that encrypted data into plain view, regardless of location, is just killing the whole reason it's encrypted to begin with.

So...in order to see these records in LB, you'll have to decrypt the records, and only Yojimbo has the key.

ludwigschubert
Rank 4
Rank 4
Posts: 285
Joined: Fri Jun 29, 2007 5:54 pm
Location: Germany, Bavaria

Post by ludwigschubert » Sun Jun 22, 2008 7:13 pm

Oh Dear.
Let's drop the word "export". That was bad wording by me. :oops:

Yojimbo provides aliases to it's database items, which contain the items name and tags and some other metadata.
For me it would be enough to search these Yojimbo items by name and tag.
LaunchBar could to this, if it read the metadata in those aliases.

Then one could find an entry in LaunchBar and open it via pressing enter.
It would launch Yojimbo and open the item. If it was encrypted, then Yojimbo would prompt you for the password.

You are right, in order to see (=read) the encrypted entries you have to decrypt them. But the names and tags are accesible by third party applications as I described.

I think that sufficient integration would be the ability to search Yojimbo entries by name and tags. Then open them in Yojimbo.

If there's any unclear in my explanation I'm happy to further elaborate it.
But please let's try to find actual value and ideas in this forum, not tell each other what concepts we supposedly don't understand. :)

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Post by beerich » Sun Jun 22, 2008 7:17 pm

Yes, but not the encrypted data fields. They are conveniently left out in the XML. Other records show all information.

Names and tags are only part of the information. That's where the limitation comes in.

ludwigschubert
Rank 4
Rank 4
Posts: 285
Joined: Fri Jun 29, 2007 5:54 pm
Location: Germany, Bavaria

Post by ludwigschubert » Sun Jun 22, 2008 7:23 pm

OK, now we're talking :wink:

But as far as I know Yojimbo itself doesn't search the contents of the encrypted items due to this limitation. (Just tried it)

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Post by beerich » Sun Jun 22, 2008 7:40 pm

It should, as it's fair game. It should just add the search into its own procedure using the key, and add them to the hitlist.

beerich
Rank 4
Rank 4
Posts: 161
Joined: Thu Apr 05, 2007 11:05 am
Location: Toronto

Post by beerich » Sun Jun 22, 2008 7:41 pm

Actually that might be an oversight...they might have chosen not to do this as it would have revealed records with certain information, creating somewhat of a boolean response to secure records. You could flush out credit card numbers using this system.

Post Reply