[Pidgin] #13151: Get Passwords - BUG
Pidgin
trac at pidgin.im
Sun Jan 2 17:21:05 EST 2011
#13151: Get Passwords - BUG
-------------------+--------------------------------------------------------
Reporter: Cibort | Type: defect
Status: new | Component: pidgin (gtk)
Version: 2.7.9 | Keywords: bug
-------------------+--------------------------------------------------------
Hi, I'm Cibort
I send this ticket to report a breach of security of passwords pidgin, are
not encrypted (all in plaine text) at all in the light of local and remote
intruders to our computer.
In the following file
/home/USERNAME/.purple/accounts.xml
TABLES:
<account>
<protocol> prpl-msn </ protocol>
<name> usernick at dominio.com </ name>
<password> Password </ password>
<alias> Nickname </ alias>
And this is true for any protocol officially supported
In my blog I have more details (Spanish only), I hope to settle it as
Pidgin chat client is a very powerful;)
More information: http://zaybort.linuxerz.org/2011/01/hackear-msn-
facebook-gmail/
I hope to help them with a grain of sand :)
Cibort
--
Ticket URL: <http://developer.pidgin.im/ticket/13151>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list