Freesound extension stored plain text password
Bug #81985 reported by
Luke Tilley
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Jokosher |
Invalid
|
Medium
|
Stuart Langridge | ||
Bug Description
i just noticed that the freesound extension stores my password unencrypted in my home directory. This is a security risk and it should be encrypted.
| Changed in jokosher: | |
| importance: | Undecided → Medium |
Revision history for this message
| Stuart Langridge (sil) wrote | #1 |
| Changed in jokosher: | |
| assignee: | nobody → sil-launchpad |
| status: | Unconfirmed → Rejected |
To post a comment you must log in.
It's not a security risk. Anyone who has the rights to read that file could simply take the decryption code from the freesound extension and decrypt it themselves. In the fullness of time, I'd like to make the freesound extension store the password in the Gnome keyring rather than storing it itself, but the gnome keyring doesn't properly have Python bindings yet.