Re: Password visible in SB Proxy V 1.1b2
Peter Liepmann <[email protected]>
| Newsgroups | gmane.mail.spam.spambayes.general |
|---|---|
| Message-ID | <[email protected]> |
Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet). The Spambayes version is from Saturday, March 06, 2010, 4:15:56 PM, FWIW -- I probably got it from sourceforge- not sure. Do you know what version of Python is being used? file:///C:/Program%20Files/SpamBayes/lib/pythoncom25.dll Version 2.5.212.7 python25.dll 2.5.2150.1013 win32service.pyd 2.5.213.1 Python version 2.5.2 Using the pop3proxy with Thunderbird. I may have tried to install Thunderbayes, which didn't work..... I reinstalled everything after a HD failure last summer. On looking, bayescustomize.ini also has the password in it in plain text. Can I just replace my current spambayes files/reinstall with the 1.1a6 files? Does 1.1a6 hide the email password better? Thanks! On 5/8/2011 9:32 PM, [email protected] wrote: > Peter> On the advancedconfig page, the password for the email account is > Peter> visible in plain text. This creates a potentially severe > Peter> security problem- if someone had access to my computer for just a > Peter> few seconds, they could pull the password for my main email, and > Peter> then have access to whatever else they wanted. (Go to bank site- > Peter> use 'forgot password'- get password mailed to now no longer > Peter> secure email, snag that, then start withdrawing money or > Peter> whatever.) > > Peter> Is this just a glitch because of the weird version, or is this a > Peter> pervasive problem? Thanks! > > Peter, > > Did this happen previous to 1.1b1 (1.1b2 hasn't been released yet). Do you > know what version of Python is being used? > _______________________________________________ [email protected] http://mail.python.org/mailman/listinfo/spambayes Info/Unsubscribe: http://mail.python.org/mailman/listinfo/spambayes Check the FAQ before asking: http://spambayes.sf.net/faq.html