[Spambayes] Password visible in SB Proxy V 1.1b2
PeterL at hvc.RR.com
Mon May 9 04:46:17 CEST 2011
Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet).
The Spambayes version is from Saturday, March 06, 2010, 4:15:56 PM,
FWIW -- I probably got it from sourceforge- not sure.
Do you know what version of Python is being used?
Python version 2.5.2
Using the pop3proxy with Thunderbird. I may have tried to install
Thunderbayes, which didn't work.....
I reinstalled everything after a HD failure last summer.
On looking, bayescustomize.ini also has the password in it in plain
Can I just replace my current spambayes files/reinstall with the
1.1a6 files? Does 1.1a6 hide the email password better?
On 5/8/2011 9:32 PM, skip at pobox.com wrote:
> Peter> On the advancedconfig page, the password for the email account is
> Peter> visible in plain text. This creates a potentially severe
> Peter> security problem- if someone had access to my computer for just a
> Peter> few seconds, they could pull the password for my main email, and
> Peter> then have access to whatever else they wanted. (Go to bank site-
> Peter> use 'forgot password'- get password mailed to now no longer
> Peter> secure email, snag that, then start withdrawing money or
> Peter> whatever.)
> Peter> Is this just a glitch because of the weird version, or is this a
> Peter> pervasive problem? Thanks!
> Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet). Do you
> know what version of Python is being used?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the SpamBayes