Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

How about killing this whole thread. Event the subject is plain wrong. Its not even an exploit.

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

Again, back to the "and do you think anybody knowing where that file is wouldn't know how to 'decrypt' it?"

They did it because of people glancing at them on the monitor, and also because then it can prompt for your master password. Nothing else.

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

I agree that topic name is highly exaggerated.

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

guys the only way to fix this if unlocking the a locked phone (device lock of the settings) would use that lock code as a password to get the private key where everything can be decrypted with.

So how many that are now complaining do have enabled the device lock?

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

I believe the point is that if seeing the file you know it's an unsecure yet sensitive file if it's plaintext and will therefore treat it right. Were it obscured the regular user wouldn't realize the file had to be treated with care since he or she wouldn't know it wasn't secure and wouldn't know what it contained.

Now the reverse would also be true, a criminal might not know what it contained right away if it were obscured, but it's a safe bet he would steal the obscured files anyway and go play.

This doesn't mean there's no point having any kind of security system but the very best though. Awareness of how secure you truly are is what's important, what/who you are protected against. Obscurity/weak security really doesn't help this in most cases.

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

Well, no point in making it idiot capable.

Re: Warning - Exploit found, keep N900 to yourself until it's fixed!
 

OK; but what's the counter-argument to the people that are actually calling for a proper solution using real encryption?

Using base64 or ROT13 is clearly stupid, but using the approach that Kwallet, Firefox (with a master password) etc. use is a bad idea because?......

Re: IM, Email Passwords Are Stored as Plain Text
 

I have never backed up. I have never updated. my passwds are stored very nice and clear.

Re: IM, Email Passwords Are Stored as Plain Text
 

I was always taught that security is implemented in multiple layers like an onion... Lots of little things add up to a more secure system. I guess some people know much better and that security is either on or off :p

Re: IM, Email Passwords Are Stored as Plain Text
 

My password was showing but I added the MSN account again, after the 1.1 upgrade, and the password isn't there. My n900 locks after 5 mins anyway.

On my Linux PC there are services with plain text passwords in /etc. I just never leave my user logged in when I'm not there, same goes for the phone, but its not really a phone and I guess some people just don't get that.