'Big Honking Security Hole' or something else?

Anthony Papillion papillion at gmail.com
Mon Oct 18 01:01:59 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

So, tonight I've been poking around my system and was looking around in
the Password and Encryption Keys application.  I've stored a few website
logins and I notice they are sitting there IN PLAIN TEXT and very readable!

While I grant that accessing this information would probably require
physical access to the machine (though, maybe, SSH would allow access to
it too), isn't this a problem?  The fact that usernames and passwords
are just sitting there in clear text?

Is there something I'm not understanding?

Thanks,
Anthony
- -- 
Anthony Papillion
Advanced Data Concepts
Remote Technical Support and Software Development

Office: (918) 919-4624
Mobile: (918) 533-9699
Twitter: @CajunTechie

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=yLmf
-----END PGP SIGNATURE-----




More information about the ubuntu-users mailing list