'Big Honking Security Hole' or something else?

Jordon Bedwell jordon at envygeeks.com
Mon Oct 18 01:24:03 UTC 2010


On 10/17/2010 08:01 PM, Anthony Papillion wrote:
> So, tonight I've been poking around my system and was looking around in
> the Password and Encryption Keys application.  I've stored a few website
> logins and I notice they are sitting there IN PLAIN TEXT and very readable!
> 
> While I grant that accessing this information would probably require
> physical access to the machine (though, maybe, SSH would allow access to
> it too), isn't this a problem?  The fact that usernames and passwords
> are just sitting there in clear text?
> 
> Is there something I'm not understanding?

Obviously, this is pretty damn broad of a statement.  How about you give
us more information.  How were you viewing them? Where they stored in
the default keyring (which is unlocked when you login ~ if you login
with a password and not auto login)

This is operator malfunction I'm assuming, not system malfunction, but
you need to be less broad and more elaborative so we can better help you
and come to a real conclusion.




More information about the ubuntu-users mailing list