[Spambayes] Password visible in SB Proxy V 1.1b2

Peter Liepmann PeterL at hvc.RR.com
Mon May 9 04:46:17 CEST 2011


Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet).

The Spambayes version is from  Saturday, March 06, 2010, 4:15:56 PM,  
FWIW  -- I probably got it from sourceforge- not sure.

Do you know what version of Python is being used?
file:///C:/Program%20Files/SpamBayes/lib/pythoncom25.dll  Version 
2.5.212.7
python25.dll    2.5.2150.1013
win32service.pyd    2.5.213.1

Python version  2.5.2

Using the pop3proxy with Thunderbird.  I may have tried to install 
Thunderbayes, which didn't work.....
I reinstalled everything after a HD failure last summer.

On looking, bayescustomize.ini  also has the password in it in plain 
text.

Can I just replace my current spambayes files/reinstall  with the 
1.1a6 files?   Does  1.1a6 hide the email password better?
Thanks!

On 5/8/2011 9:32 PM, skip at pobox.com wrote:
>      Peter>  On the advancedconfig page, the password for the email account is
>      Peter>  visible in plain text.  This creates a potentially severe
>      Peter>  security problem- if someone had access to my computer for just a
>      Peter>  few seconds, they could pull the password for my main email, and
>      Peter>  then have access to whatever else they wanted.  (Go to bank site-
>      Peter>  use 'forgot password'- get password mailed to now no longer
>      Peter>  secure email, snag that, then start withdrawing money or
>      Peter>  whatever.)
>
>      Peter>  Is this just a glitch because of the weird version, or is this a
>      Peter>  pervasive problem?  Thanks!
>
> Peter,
>
> Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet).  Do you
> know what version of Python is being used?
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/spambayes/attachments/20110508/b90224b2/attachment.html>


More information about the SpamBayes mailing list