[Pidgin] #13151: Get Passwords - BUG

Pidgin trac at pidgin.im
Sun Jan 2 17:21:05 EST 2011


#13151: Get Passwords - BUG
-------------------+--------------------------------------------------------
Reporter:  Cibort  |        Type:  defect      
  Status:  new     |   Component:  pidgin (gtk)
 Version:  2.7.9   |    Keywords:  bug         
-------------------+--------------------------------------------------------
 Hi, I'm Cibort

 I send this ticket to report a breach of security of passwords pidgin, are
 not encrypted (all in plaine text) at all in the light of local and remote
 intruders to our computer.

 In the following file

 /home/USERNAME/.purple/accounts.xml

 TABLES:

 <account>
 <protocol> prpl-msn </ protocol>
 <name> usernick at dominio.com </ name>
 <password> Password </ password>
 <alias> Nickname </ alias>

 And this is true for any protocol officially supported


 In my blog I have more details (Spanish only), I hope to settle it as
 Pidgin chat client is a very powerful;)

 More information: http://zaybort.linuxerz.org/2011/01/hackear-msn-
 facebook-gmail/


 I hope to help them with a grain of sand :)

 Cibort

-- 
Ticket URL: <http://developer.pidgin.im/ticket/13151>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list