'Big Honking Security Hole' or something else?

[Anthony Papillion]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/17/2010 08:24 PM, Jordon Bedwell wrote:
> On 10/17/2010 08:01 PM, Anthony Papillion wrote:
>> So, tonight I've been poking around my system and was looking around in
>> the Password and Encryption Keys application.  I've stored a few website
>> logins and I notice they are sitting there IN PLAIN TEXT and very readable!
>>
>> While I grant that accessing this information would probably require
>> physical access to the machine (though, maybe, SSH would allow access to
>> it too), isn't this a problem?  The fact that usernames and passwords
>> are just sitting there in clear text?
>>
>> Is there something I'm not understanding?
> 
> Obviously, this is pretty damn broad of a statement.  How about you give
> us more information.  How were you viewing them? Where they stored in
> the default keyring (which is unlocked when you login ~ if you login
> with a password and not auto login)
> 
> This is operator malfunction I'm assuming, not system malfunction, but
> you need to be less broad and more elaborative so we can better help you
> and come to a real conclusion.

Thank you for your answer. I'm withdrawing my question as I'm not sure I
*can* formulate it in an acceptable and clear way.  I'll do a bit more
research on my own and figure it out.

Thanks!

Anthony


- -- 
Anthony Papillion
Advanced Data Concepts
Remote Technical Support and Software Development

Office: (918) 919-4624
Mobile: (918) 533-9699
Twitter: @CajunTechie

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=8FAS
-----END PGP SIGNATURE-----