Reply
Thread Tools
Posts: 18 | Thanked: 3 times | Joined on Jan 2010 @ Varberg, Sweden
#21
FYI I just tried adding a Google Talk account and logging in. Didn't show my password.

Edit: so to sum it up that's PR1.1 flashed, never taken a backup, no passwords showing in accounts.cfg for MSN, ICQ or Google Talk, though I've never been online with ICQ.

Last edited by HeinzHarald; 2010-01-18 at 11:57.
 
EmmaGx's Avatar
Posts: 194 | Thanked: 207 times | Joined on Dec 2009 @ Bristol, UK
#22
... ooops ... that contains three of my passwords!
 
Posts: 3,617 | Thanked: 2,412 times | Joined on Nov 2009 @ Cambridge, UK
#23
I have backed up (non protected), and neither my Ovi nor my Skype password are in the file. I've also had to restore from backup, and the Skype account wasn't recreated afterwards - I don't think the Ovi one was either, but I can't be sure.
 
Stskeeps's Avatar
Posts: 1,671 | Thanked: 11,478 times | Joined on Jun 2008 @ Warsaw, Poland
#24
FWIW, unless you type in a passphrase upon startup of your device, there's no sane way to have encrypted passwords. The usual 'encrypted' passwords people see are usually a static passphrase and about as secure as a broken padlock. Yes, there's unencrypted passwords in gconf and other places. If they were to be truely encrypted we would need the TPM from Maemo6 devices. They have to be unencrypted as you would need to unlock it for the application each time it uses it.
__________________
As you go on to other communities, remember to build them around politeness, respect, trust and humility. Be wary of poisonous people and deal with them before they end up killing your community.. Seen it happen to too many IRC channels, forums, open source projects.
 

The Following 14 Users Say Thank You to Stskeeps For This Useful Post:
Posts: 3,664 | Thanked: 1,530 times | Joined on Sep 2009 @ Hamilton, New Zealand
#25
damn, scary bug.
how do we fix that? all my password are in plaintext.This could lead to easy trojan data info collecting which lead to destructions.

o.o may god help us......
 
Posts: 891 | Thanked: 499 times | Joined on Nov 2009 @ UK
#26
My question now is where does .rtcom-accounts\accounts.cfg get its data from to the backup and whether or not that's protected as well?
__________________
Follow me on Twitter
 
Posts: 3,617 | Thanked: 2,412 times | Joined on Nov 2009 @ Cambridge, UK
#27
Perhaps this has been fixed and it's only accounts created prior to PR1.1 which still have passwords in?
 

The Following User Says Thank You to Rob1n For This Useful Post:
Andre Klapper's Avatar
Posts: 1,665 | Thanked: 1,649 times | Joined on Jun 2008 @ Praha, Czech Republic
#28
Originally Posted by MartinNZ View Post
also I've noticed that the autocomplete function caches my passwords too. Yesterday a frend of mine was composing an email with my N900 and the device suggested my passwords to him. Grr
That's fixed in 2.2009.51-1, see https://bugs.maemo.org/show_bug.cgi?id=5419 . Please always mention which version you are running.
__________________
maemo.org Bugmaster
 

The Following 3 Users Say Thank You to Andre Klapper For This Useful Post:
Andre Klapper's Avatar
Posts: 1,665 | Thanked: 1,649 times | Joined on Jun 2008 @ Praha, Czech Republic
#29
Originally Posted by MartinNZ View Post
ive updated my firmware and it is still happening. just checked.
Of course it will as your dictionary file does not get overwritten. I don't think you want to start teaching the N900 from scratch?
You have to remove that string from the dictionary first...
__________________
maemo.org Bugmaster
 
Andre Klapper's Avatar
Posts: 1,665 | Thanked: 1,649 times | Joined on Jun 2008 @ Praha, Czech Republic
#30
So, what is the proposal here? base64 encoding which takes simply one command more to decrypt?
__________________
maemo.org Bugmaster
 

The Following User Says Thank You to Andre Klapper For This Useful Post:
Reply

Tags
conversations, debate, email, fremantle, instant message, instant messaging, maemo, maemo 5, modest, password, passwords, plain text, security, telepathy

Thread Tools

 
Forum Jump


All times are GMT. The time now is 08:25.