[Spambayes] Password visible in SB Proxy V 1.1b2
Peter Liepmann
PeterL at hvc.RR.com
Mon May 9 00:36:06 CEST 2011
On the advancedconfig page, the password for the email account is
visible in plain text.
This creates a potentially severe security problem- if someone had
access to my computer for just a few seconds, they could pull the
password for my main email, and then have access to whatever else they
wanted. (Go to bank site- use 'forgot password'- get password mailed
to now no longer secure email, snag that, then start withdrawing money
or whatever.)
Is this just a glitch because of the weird version, or is this a
pervasive problem? Thanks!
More information about the SpamBayes
mailing list