Re: Fetchmail and Gmail
On Monday 24 August 2009 07:05:18 Rob Gom wrote:
> I believe that storing passwords encrypted is always
> safer than storing them unencrypted.
Well, then you would be wrong.
I an unattended program can take the bytes stored in the inode(s) and send
your password to your ISP then a program written by an attacker can take the
same bytes and send your password back to the attacker. Technically the
password is not encrypted in this case, only obfuscated.
If your password requires getting a passphrase/key/whatever from you, it can't
be used by non-interactive programs.
--
Boyd Stephen Smith Jr. ,= ,-_-. =.
bss@iguanasuicide.net ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/ \_/
Reply to: