Menu

Main Menu
Talk Get Daily Search

Member's Online

    User Name
    Password

    IM, Email Passwords Are Stored as Plain Text

    Reply
    Page 4 of 15 | Prev |   2     3   4   5     6   14 | Next | Last
    Venomrush | # 31 | 2010-01-18, 12:02 | Report

    Originally Posted by Andre Klapper View Post
    That's fixed in 2.2009.51-1, see https://bugs.maemo.org/show_bug.cgi?id=5419 . Please always mention which version you are running.
    That's for Wifi not browser.
    Not sure if there's one filled for browser as well.

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following User Says Thank You to Venomrush For This Useful Post:
    jjx

     
    mece | # 32 | 2010-01-18, 12:15 | Report

    Why is everyone acting surprised? Most Im clients are like this.
    I don't mind this, but it would be nice with a keyring type option.

    You could read this for perspective:
    http://developer.pidgin.im/wiki/PlainTextPasswords

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following 9 Users Say Thank You to mece For This Useful Post:
    Andre Klapper, hqh, Jaffa, Kilian, lorelei, pelago, R-R, sjgadsby, Stskeeps

     
    Venomrush | # 33 | 2010-01-18, 12:21 | Report

    Originally Posted by mece View Post
    Why is everyone acting surprised? Most Im clients are like this.
    I don't mind this, but it would be nice with a keyring type option.

    You could read this for perspective:
    http://developer.pidgin.im/wiki/PlainTextPasswords
    Last Modified by petr.bug, 16 months ago

    You should not apply what being said in this article to today's world where security takes priority, where there's a massive growth in the smart mobile market and Web 2.0 usage such as blogging Twitter Facebook etc.

    Users are now becoming more concern with their privacy and the risks of identity theft.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    slender | # 34 | 2010-01-18, 12:22 | Report

    mece, its true and at least i'n not surprised but off course its bit worrying when you have for example google services password exposed. You can also load money to skypeout. These are not anymore "just" traditional IM clients.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    MartinNZ | # 35 | 2010-01-18, 12:27 | Report

    Originally Posted by Andre Klapper View Post
    That's fixed in 2.2009.51-1, see https://bugs.maemo.org/show_bug.cgi?id=5419 . Please always mention which version you are running.
    i am running the most current .51. it is still caching my passwords for autocomplete.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    MartinNZ | # 36 | 2010-01-18, 12:30 | Report

    Originally Posted by Andre Klapper View Post
    Of course it will as your dictionary file does not get overwritten. I don't think you want to start teaching the N900 from scratch?
    You have to remove that string from the dictionary first...
    thanks andre.... it aint too straightforward to purge the dict tho. does nokia expect all the users to do this?

    Edit | Forward | Quote | Quick Reply | Thanks

     
    PhilE | # 37 | 2010-01-18, 12:31 | Report

    Yup definitely a case of moleHill != Mountain

    Regardless of whether you're talking about a mobile phone, PDA, laptop, desktop or even a server in a data centre, once the miscreant has physical access, there's little you can do to stop your data being compromised, unless you've gone as far as implementing things like whole-disk encryption or similar.

    There are other bugs that I'd (personally) far rather the Maemo team spent their time on.

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following 8 Users Say Thank You to PhilE For This Useful Post:
    Andre Klapper, bbin, GeneralAntilles, hqh, Jaffa, lma, sjgadsby, Stskeeps

     
    scudderfish | # 38 | 2010-01-18, 12:33 | Report

    If you don't have physical control of the device when it is in an unlocked state, all bets are off for data integrity. I'd be more worried about someone racking up a huge phone bill with my phone than them getting an IM password.

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following 3 Users Say Thank You to scudderfish For This Useful Post:
    hqh, PhilE, sjgadsby

     
    slux | # 39 | 2010-01-18, 12:37 | Report

    Originally Posted by Venomrush View Post
    Last Modified by petr.bug, 16 months ago

    You should not apply what being said in this article to today's world where security takes priority, where there's a massive growth in the smart mobile market and Web 2.0 usage such as blogging Twitter Facebook etc.

    Users are now becoming more concern with their privacy and the risks of identity theft.
    Nothing discussed in that article has changed. A false sense of security achieved by obscuring the passwords that are still trivially recoverable does not become any better in a world where "security takes priority".

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following 5 Users Say Thank You to slux For This Useful Post:
    Andre Klapper, Jaffa, lma, pelago, R-R

     
    slender | # 40 | 2010-01-18, 12:42 | Report

    So its all or nothing? Black or white?

    There is no different levels of security?

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Page 4 of 15 | Prev |   2     3   4   5     6   14 | Next | Last
vBulletin® Version 3.8.8
Normal Logout