whiteboard backtrace reveals sensitive information

[Rwst]

due to security considerations the bug is not described
here fully, the problem being information being shown
in backtraces.

the bug is known to dwyip and therefore assigned to him

[Dwyip (dwyip)]

I do not think it is possible to fix this in the
Loudmouth-based Inkboard, as both
lm_connection_authenticate_and_block and
lm_connection_authenticate require the password to be passed
as gchar const*, and gdb can easily dereference that into
cleartext.

[Dwyip (dwyip)]

er, I should also add that both functions require it to be
passed as a parameter, and there's really no way to
obfuscate it with e.g. another level of indirection.

I can bug Mikael about this, though.

[Peter Lewerin (vermeil-deactivatedaccount)]

I'm setting this to incomplete in accordance with <URL http://wiki.inkscape.org/wiki/index.php/BugTriageProjects>.

[Bryce Harrington (bryce)]

Dwyip, have you had a chance to look into this?

[Tom Davidson (tjd-mit)]

Given that this bug is explicitly not described 'due to security considerations', I don't think it should be marked incomplete (triggers expiry). Marking importance 'unknown'

[ishmal (ishmalius)]

Loudmouth is no longer used, so this particular instance no longer happens. Please open a new bug if something similar is found with the new xmpp implementation.