SGP version 3 beta, bug reports needed

I have a more-or-less functional new version of SuperGenPass ready for testing. Here is a ready-to-use bookmarklet:

http://supergenpass.com/beta.html

The source is available on Github:

https://github.com/chriszarate/SuperGenPass

I would appreciate any help in reporting bugs. I am mainly interested in browser incompatibilities, quirks, and sites on which SGP malfunctions or simply doesn't work. Feel free to use either Github's issue tracker or this thread.

If you haven't done so already, please read this earlier message about changes and compromises made with this new version:

http://discuss.supergenpass.com/New-version-of-SuperGenPass-td3236533.html

Thanks for any time you can spare.

How to activate the advanced features? I can't seem to see them on Safari or Chrome, OS X.

Sorry, that's currently not documented. The advanced features can be activated by visiting:

http://mobile.supergenpass.com/#advanced

Thanks! How can I generate a bookmarklet that will use SHA1 instead?

The advanced options offer SHA-512 as an alternative. My thinking in including SHA-512 was (1) I wanted to limit the number of built-in options to preserve room for future expansion and (2) I wanted to choose a hash function without currently known cryptographic flaws and with stronger resistance to brute-force attacks. Cryptographic flaws are not necessarily an issue for SGP but they produce knee-jerk responses from people who blindly deem a hash "broken." Resistance to brute-force attacks, however, is important. I'm certainly willing to listen to an argument for SHA-1 over SHA-512; however, I'd be hesitant to include both for reason (1) above.

All that said, I have made efforts to make SGP modular and easier to customize. If one wants to use a different hash function, one can simply host their own version of SGP and swap in a different sgp.hash.js. It must provide two functions to SGP: hex_hash and b64_hash. The former generates hashes for Identicons and the latter produces the hashes for passwords.

Also, you asked how to customize the bookmarklet to use SHA-1. It's important to note that in this new version of SGP, the bookmarklet loads the mobile version. They are one and the same. To customize the bookmarklet, customize the mobile version (with advanced options, if desired). Changes to password length, hash function, and salt are saved using HTML5 local storage. One must do this for each browser one uses.

For some reason Chrome (at least on osx) won't let me bookmark the bookmarklet link...  Has anyone else had any luck?

Chrome doesn't seem to let you bookmark any link via a right-click action, bookmarklet or not. The easiest way I've found is to drag it to your Bookmarks Bar. You may need to first make the Bookmarks Bar visible using under "View." From there you can move it to the Bookmarks menu using the Bookmark Manager.