Why would someone leave this file out in the open on the internet to begin with? The Filezilla team doesn't consider this a bug: http://trac.filezilla-project.

Why would someone leave this file out in the open on the internet to begin with? The Filezilla team doesn't consider this a bug: http://trac.filezilla-project.org/ticket/4507 http://trac.filezilla-project.org/ticket/4507 It's a design decision to store passwords in plain text in a file that is never intended to be shared openly. It's not like Filezilla is alone here. Any application that stores passwords either in plain text or with reversible encryption can be attacked by local system processes.