Active Topics
-
Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (3)
to SailfishOS by edp17 - 2 hrs, 27 mins ago -
The N900 is now 15 years old! (6)
to Nokia N900 by Macros - 1 day, 6 hrs ago -
F(x)tec Pro1x (QWERTY) for sale (0)
to Buy & Sell by aln00000 - 1 day, 19 hrs ago -
n770 youtube video (0)
to General by nmdv - 5 days, 18 hrs ago - more...
 |
|
2010-01-18
, 11:54
|
|
Posts: 194 |
Thanked: 207 times |
Joined on Dec 2009
@ Bristol, UK
|
#22
|
... ooops ... that contains three of my passwords!
|
|
2010-01-18
, 11:56
|
|
Posts: 3,617 |
Thanked: 2,412 times |
Joined on Nov 2009
@ Cambridge, UK
|
#23
|
I have backed up (non protected), and neither my Ovi nor my Skype password are in the file. I've also had to restore from backup, and the Skype account wasn't recreated afterwards - I don't think the Ovi one was either, but I can't be sure.
 |
|
2010-01-18
, 11:56
|
|
Posts: 1,671 |
Thanked: 11,478 times |
Joined on Jun 2008
@ Warsaw, Poland
|
#24
|
FWIW, unless you type in a passphrase upon startup of your device, there's no sane way to have encrypted passwords. The usual 'encrypted' passwords people see are usually a static passphrase and about as secure as a broken padlock. Yes, there's unencrypted passwords in gconf and other places. If they were to be truely encrypted we would need the TPM from Maemo6 devices. They have to be unencrypted as you would need to unlock it for the application each time it uses it.
__________________
As you go on to other communities, remember to build them around politeness, respect, trust and humility. Be wary of poisonous people and deal with them before they end up killing your community.. Seen it happen to too many IRC channels, forums, open source projects.
As you go on to other communities, remember to build them around politeness, respect, trust and humility. Be wary of poisonous people and deal with them before they end up killing your community.. Seen it happen to too many IRC channels, forums, open source projects.
|
|
2010-01-18
, 11:56
|
|
Posts: 3,664 |
Thanked: 1,530 times |
Joined on Sep 2009
@ Hamilton, New Zealand
|
#25
|
damn, scary bug.
how do we fix that? all my password are in plaintext.This could lead to easy trojan data info collecting which lead to destructions.
o.o may god help us......
how do we fix that? all my password are in plaintext.This could lead to easy trojan data info collecting which lead to destructions.
o.o may god help us......
|
|
2010-01-18
, 11:57
|
|
Posts: 891 |
Thanked: 499 times |
Joined on Nov 2009
@ UK
|
#26
|
My question now is where does .rtcom-accounts\accounts.cfg get its data from to the backup and whether or not that's protected as well?
__________________
Follow me on Twitter
Follow me on Twitter
|
|
2010-01-18
, 11:57
|
|
Posts: 3,617 |
Thanked: 2,412 times |
Joined on Nov 2009
@ Cambridge, UK
|
#27
|
Perhaps this has been fixed and it's only accounts created prior to PR1.1 which still have passwords in?
| The Following User Says Thank You to Rob1n For This Useful Post: | ||
 |
|
2010-01-18
, 12:00
|
|
Posts: 1,665 |
Thanked: 1,649 times |
Joined on Jun 2008
@ Praha, Czech Republic
|
#28
|
Originally Posted by MartinNZ
That's fixed in 2.2009.51-1, see https://bugs.maemo.org/show_bug.cgi?id=5419 . Please always mention which version you are running.
also I've noticed that the autocomplete function caches my passwords too. Yesterday a frend of mine was composing an email with my N900 and the device suggested my passwords to him. Grr
__________________
maemo.org Bugmaster
maemo.org Bugmaster
|
|
2010-01-18
, 12:01
|
|
Posts: 1,665 |
Thanked: 1,649 times |
Joined on Jun 2008
@ Praha, Czech Republic
|
#29
|
Originally Posted by MartinNZ
Of course it will as your dictionary file does not get overwritten. I don't think you want to start teaching the N900 from scratch?
ive updated my firmware and it is still happening. just checked.
You have to remove that string from the dictionary first...
__________________
maemo.org Bugmaster
maemo.org Bugmaster
|
|
2010-01-18
, 12:02
|
|
Posts: 1,665 |
Thanked: 1,649 times |
Joined on Jun 2008
@ Praha, Czech Republic
|
#30
|
So, what is the proposal here? base64 encoding which takes simply one command more to decrypt?
__________________
maemo.org Bugmaster
maemo.org Bugmaster
| The Following User Says Thank You to Andre Klapper For This Useful Post: | ||
 |
| Tags |
| conversations, debate, email, fremantle, instant message, instant messaging, maemo, maemo 5, modest, password, passwords, plain text, security, telepathy |
«
Previous Thread
|
Next Thread
»
|
All times are GMT. The time now is 15:29.
Edit: so to sum it up that's PR1.1 flashed, never taken a backup, no passwords showing in accounts.cfg for MSN, ICQ or Google Talk, though I've never been online with ICQ.
Last edited by HeinzHarald; 2010-01-18 at 11:57.