pyjama stores and shows Last.fm password in plain text

Bug #385651 reported by Santiago M. Mola
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
pyjama
Won't Fix
Low
Unassigned

Bug Description

Last.fm password is stored in plain text, and it's shown in plain text too.

Supporting gnome-keyring would be ideal for me, or alternatively, another method.

(Using pyjama 0.3.0.1)

Revision history for this message
Daniel Nögel (daniel-xn--ngel-5qa) wrote :

For me in pyjama 0.3.0.1 as well as in the current development version, passwords are hidden in the config-dialog (NOT configtool, which will be removed in the next released). So I cannot tell why it isn't the case for you.

Encryption for these passwords won't come - or only as base64, rot or some other weak encoding. Why? 'cause the gnome-keyring would lock out other platforms and I don't know a platform independent solution. Other programs - like pidgin - also store passwords in plain text; there is no good reason make the user think that saved passwords are safe when they aren't actually.

If there'd be a good solution for passwords, I'd implement it asap, of course.

Thanks for reporting anyway!

Changed in pyjama:
importance: Undecided → Low
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.