[Spambayes] Password visible in SB Proxy V 1.1b2

Peter Liepmann PeterL at hvc.RR.com
Mon May 9 00:36:06 CEST 2011


On the advancedconfig page, the password for the email account is 
visible in plain text.
This creates a potentially severe security problem- if someone had 
access to my computer for just a few seconds, they could pull the 
password for my main email, and then have access to whatever else they 
wanted.  (Go to bank site- use 'forgot password'- get password mailed 
to now no longer secure email, snag that, then start withdrawing money 
or whatever.)

Is this just a glitch because of the weird version, or is this a 
pervasive problem?  Thanks!


More information about the SpamBayes mailing list