Re: Filezilla a security risk
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Camaleón schrieb:
>>> and hey, it's open source! You can hire a programmer, make a
>>> fork ("FileZilla-S" for secure) and add all the enhancements you
>>> want ;-
>> Forking a program for a single little feature doesn't make a lot
>> of sense to me.
> If you value so much that feature and you really like the
> application, why not?
I didn't. It's more that I dislike the attitude of some developers (in
general) saying that they don't have to care about uninformed users who
misconfigure their systems or even don't know how to protect themselves.
At least they should inform the user that saving passwords is insecure.
> I wonder if a feasible approach to store credentials in clear text
> for FileZilla would be using something like the gnome-keyring or a
> similar implementation for the different OSes or linux boxes,
> although of course, this would add additional drawbacks.
I like how MacOS handle this, nearly every application designed for
MacOS is using the built in Keychain. Of course, if the keychain tool
isn't secure this is a big problem.
Bye.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJP7tiwAAoJEGqblLUjc3f4Hk8H/17B60KAn5m5f7kzAKPLKUBb
ke9h/lYtoxMtDOUlmebDGc/S2QMI0eX88fV/kI8cpSfqVJrVtM8B0iLikvCThkhe
aO0MWVSIxdZw0cDdNr4hEwqseBYrSTAN1msgDkPWp9CBAv8W4+9eL1/nQTlqipUA
GoD4fZ7a+IxMuJfSKujfKFVo/8huQSpW3XXDvxXg8W6sW6KsaSOaMfQrZIKRMs8K
/5ZWG9iqyjSbpo17ZhFVTsg9IkpPRVcijYEoAG1qZg17CbupieIEHDou2FzITA5M
pncWwIgwzdfoOL0nb9TuhJYXNjtGxMAdjDQBGRqPyQ3ogD1fMHnHThlcfF4CInQ=
=ZzgY
-----END PGP SIGNATURE-----
Reply to: