I can confirm that they were in fact fixed.  The plain text password exploit was related to the installer script (known as Ubiquity) keeping the root password that you select in a plain text file in the system after installation rather than immediately deleting it.  This was fixed back between Dapper / Edgy. -David <div>On 9/25/07, Jim Hutchinson <<a href="mailto:jim@ubuntu-rocks.org">jim@ubuntu-rocks.org</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Plain text passwords than Andrew referred to have been fixed - I think. On 9/25/07, Neal McBurnett <<a href="mailto:neal@bcn.boulder.co.us">neal@bcn.boulder.co.us</a>> wrote: > On Tue, Sep 25, 2007 at 04:40:39PM -0600, Jim Hutchinson wrote: > > I think that's been fixed. > > > > On 9/25/07, Andrew <<a href="mailto:keen101@gmail.com">keen101@gmail.com</a>> wrote: > > > I heard that the Canonical people were planning to fix the security flaw in > > > Ubuntu, where passwords are kept in plain text. > > Huh?  You'll have to be a bit more specific there for me. > > But this google result was a disappointment for me about gaim/pidgin: > >  <a href="http://www.osnews.com/story.php/17964/Insecure-Passwords-on-GaimPidgin/">http://www.osnews.com/story.php/17964/Insecure-Passwords-on-GaimPidgin/</a> > > $ grep password $HOME/.{gaim,pidgin}/accounts.xml > > Neal McBurnett                 <a href="http://mcburnett.org/neal/">http://mcburnett.org/neal/</a> > > -- > Ubuntu-us-co mailing list > <a href="mailto:Ubuntu-us-co@lists.ubuntu.com"> Ubuntu-us-co@lists.ubuntu.com</a> > Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co">https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co</a> > -- Please avoid sending me Word or PowerPoint attachments. See <a href="http://www.gnu.org/philosophy/no-word-attachments.html">http://www.gnu.org/philosophy/no-word-attachments.html</a> -- Ubuntu-us-co mailing list <a href="mailto:Ubuntu-us-co@lists.ubuntu.com">Ubuntu-us-co@lists.ubuntu.com</a> Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co">https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co </a> </blockquote></div> -- --------------------------------------------------------- <a href="http://www.funnylookinhat.com">http://www.funnylookinhat.com</a> AIM: FunnyLookinHat ICQ: 40145621 MSN: <a href="mailto:funnylookinhat@gmail.com">funnylookinhat@gmail.com</a> Jabber: <a href="mailto:funnylookinhat@gmail.com">funnylookinhat@gmail.com</a> IRC: <a href="http://irc.freenode.net">irc.freenode.net</a> ---------------------------------------------------------