[Spambayes] Password visible in SB Proxy V 1.1b2

skip at pobox.com skip at pobox.com
Mon May 9 03:32:46 CEST 2011


    Peter> On the advancedconfig page, the password for the email account is
    Peter> visible in plain text.  This creates a potentially severe
    Peter> security problem- if someone had access to my computer for just a
    Peter> few seconds, they could pull the password for my main email, and
    Peter> then have access to whatever else they wanted.  (Go to bank site-
    Peter> use 'forgot password'- get password mailed to now no longer
    Peter> secure email, snag that, then start withdrawing money or
    Peter> whatever.)

    Peter> Is this just a glitch because of the weird version, or is this a
    Peter> pervasive problem?  Thanks!

Peter,

Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet).  Do you
know what version of Python is being used?

-- 
Skip Montanaro - skip at pobox.com - http://www.smontanaro.net/


More information about the SpamBayes mailing list