[X2go-dev] Password in plain text!?!?!?

Alexander.Kuchler at pruftechnik.com Alexander.Kuchler at pruftechnik.com
Thu Jul 30 15:54:51 CEST 2009


Dear group,

today I figured out you are saving the password entered during the startup 
of the session in plain text in C:\Documents\%User%\.x2go\ssh\.
And not even delete it after closing the session..

You can not be serious!?

Especially when knowing you are promoting X2Go for schools etc. where 
different people might access the same terminals this is not only 
dangerous but breakneck.

Yours,
Alexander
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20090730/f9b0d064/attachment.html>


More information about the x2go-dev mailing list