[Pidgin] #14830: dbus information leakage

Pidgin trac at pidgin.im
Sat Feb 25 17:43:42 EST 2012


#14830: dbus information leakage
---------------------+------------------------------------------------------
 Reporter:  dfunc    |        Owner:  rekkanoryo
     Type:  defect   |       Status:  new       
Milestone:           |    Component:  libpurple 
  Version:  2.10.0   |   Resolution:            
 Keywords:  privacy  |  
---------------------+------------------------------------------------------

Comment(by bleeter):

 Please note that whilst the information on the leak is correct, I believe
 the wrong 'product' has been labelled as the cause. Pidgin is the GTK UI
 that sits above libpurple. After a cursory look across the code, I believe
 any libpurple client using DBUS would also be exposed to this problem, not
 just Pidgin. There are patches out there for OTR to work with Finch, I've
 not tried it but I'd be surprised if it didn't have the same problem. Did
 you test these and were you able to confirm it's ONLY in Pidgin?

 Here's a quick list of other products using libpurple.
 http://developer.pidgin.im/wiki/WhatIsLibpurple

 Pete.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14830#comment:5>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list