4 ms·
I agree with you. That said, it is a possible vector they should patch up, so it shouldn't be ignored by any means. Its just minor enough I dont see why any o
by cnlwsu 14y ago
I agree with you. That said, it is a possible vector they should patch up, so it shouldn't be ignored by any means. Its just minor enough I dont see why any of us should care.
- peterwwillis 14y agoI hope you never click 'save password' in Pidgin, or about a thousand different local apps. There's a 'vector' there too!
- JensenDied 14y agoI know you're being funny, but for everyone else here's their spiel on saving your passwords locally: https://developer.pidgin.im/wiki/PlainTextPasswords https://developer.pidgin.im/wiki/PlainTextPasswords The default and most secure setting is to not save passwords.
- cbsmith 14y ago> The default and most secure setting is to not save passwords. While true from a systems vantage point, it isn't really true once you bring in the human factors. It just isn't reasonable to think people will type in distinct and secure passwords for each of their IM accounts each time they start up their client. It's far more reasonable to have a password manager which manages which applications have access to which passwords, and which stores the passwords all protected by a master password (ideally with two factor authentication).