Full Disclosure mailing list archives
Quicksilver Social Bookmark plugin v.8F: password in clear text
From: "max perience" <mperience () googlemail com>
Date: Wed, 28 Feb 2007 13:21:20 +0100
Quicksilver http://quicksilver.blacktree.com/ is a tool to quickly find/launch/do anything you like with all kind of files, bookmarks etcpp on MacOSX (>=10.3) There exists a plug-in "Social Bookmarks" to integrate and search del.icio.us bookmarks. In version 8F this plugin logs the username and password to Console.log. Console.log is archived in /Library/Logs/Console/UID Passwords should never appear anywhere on the disk in clear text. The issue seems to be fixed in newer versions of the plug-in. Update now. MaxP _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Quicksilver Social Bookmark plugin v.8F: password in clear text max perience (Feb 28)