Venomrush | # 1 | 2010-01-18, 11:29 | Report

See bug 8146

Hexagoon | # 2 | 2010-01-18, 11:34 | Report

Well, this doesn't seem to apply to my device. Isn't this only if you've taken a full backup?

slender | # 3 | 2010-01-18, 11:35 | Report

file:///home/user/.rt-accounts/accounts.cfg
could not find there but here:
file:///home/user/.rtcom-accounts/accounts.cfg

Hexagoon | # 4 | 2010-01-18, 11:36 | Report

Oh.. now i see... That's just plain stupid...

torpedo48 | # 5 | 2010-01-18, 11:41 | Report

Very nice catch, already verified that

file:///home/user/.rtcom-accounts/accounts.cfg

in Web let me know all my friends' IM passwords in their N900.

MartinNZ | # 6 | 2010-01-18, 11:41 | Report

also I've noticed that the autocomplete function caches my passwords too. Yesterday a frend of mine was composing an email with my N900 and the device suggested my passwords to him. Grr

slux | # 7 | 2010-01-18, 11:42 | Report

Well, to put things into perspective I believe that not having them there in plaintext would only serve as making it slightly more difficult to do this as the software still has to decrypt and send the passwords when logging in and it would not be a major problem to snatch them if you have physical access to the system said software is running on.

HeinzHarald | # 8 | 2010-01-18, 11:43 | Report

I just tried that and as far as personal information goes it only contained my login, not password (never taken a backup if that were to make a difference).

slender | # 9 | 2010-01-18, 11:45 | Report

i have skype and google talk installed and it seems like i have google talk passowrd in plain text.

.edit
skype is also in plain text and i have made backup

---

Last edited by slender; 2010-01-18 at 11:53.

Venomrush | # 10 | 2010-01-18, 11:45 | Report

Think it's already been reported and was fixed in PR1.1?