[Patches] [ python-Patches-497420 ] ftplib: ftp anonymous password

SourceForge.net noreply@sourceforge.net
Mon, 19 May 2003 23:17:31 -0700


Patches item #497420, was opened at 2001-12-28 21:30
Message generated for change (Comment added) made by loewis
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=497420&group_id=5470

Category: Library (Lib)
Group: None
>Status: Closed
Resolution: Accepted
Priority: 5
Submitted By: Eduardo Pérez (eperez)
Assigned to: Martin v. Löwis (loewis)
Summary: ftplib: ftp anonymous password

Initial Comment:
I've seen that ftplib sends the user name when doing
ANONYMOUS ftp gets.
I see a lot of problems:
- Sending the user name if the user doesn't know that
it's sent doesn't protect the user state of ANONYMOUS
- Spyware is not a good idea, most users don't like it.
- Sending the user name helps SPAM instead of stopping
it. Many ftp sites use this information to send you
unsolicited email.
- Sending the user name doesn't help ftp sites to know
who the cracker is, crackers are not stupid to send
their email address.
- Sending the user name can be used to discriminate the
user.

By all of these reasons I argue that ftplib to don't
send the user email by default.

Some time ago two very important ftp clients wget and
lftp stopped sending the user name as password based on
my input.

As more and more ftp clients are moving to this
anonymous@ password (for example the kde kio ftp, qt3,
gnome-xml, Net::FTP)
I recommend you to apply the patch.

I send you the bugfix.


----------------------------------------------------------------------

>Comment By: Martin v. Löwis (loewis)
Date: 2003-05-20 08:17

Message:
Logged In: YES 
user_id=21627

Backport committed as 1.60.10.4

----------------------------------------------------------------------

Comment By: Martin v. Löwis (loewis)
Date: 2003-05-20 00:33

Message:
Logged In: YES 
user_id=21627

Backport to 2.2.

----------------------------------------------------------------------

Comment By: Guido van Rossum (gvanrossum)
Date: 2001-12-28 21:55

Message:
Logged In: YES 
user_id=6380

Thanks! You're right. Checked in as ftplib.py 1.63.



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=497420&group_id=5470